diff options
| author | Markus Friedl <markus@cvs.openbsd.org> | 2005-01-04 19:42:40 +0000 |
|---|---|---|
| committer | Markus Friedl <markus@cvs.openbsd.org> | 2005-01-04 19:42:40 +0000 |
| commit | 0a3089268bf86c6df7169d12474eff34763edbf1 (patch) | |
| tree | 82b0116383944d1d9d66ea3df9782eeaeb3e1788 /lib/libc | |
| parent | e0f9857632385849b607c258b89fbb5fa612fd8b (diff) | |
restrict forwarding to ipsec processed traffic of ip.forwarding==2
ok deraadt, henning, fgsch, mcbride
Diffstat (limited to 'lib/libc')
| -rw-r--r-- | lib/libc/gen/sysctl.3 | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/lib/libc/gen/sysctl.3 b/lib/libc/gen/sysctl.3 index e132cb41635..5ed975f65d0 100644 --- a/lib/libc/gen/sysctl.3 +++ b/lib/libc/gen/sysctl.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: sysctl.3,v 1.140 2004/07/28 17:15:12 tholo Exp $ +.\" $OpenBSD: sysctl.3,v 1.141 2005/01/04 19:42:39 markus Exp $ .\" .\" Copyright (c) 1993 .\" The Regents of the University of California. All rights reserved. @@ -1184,10 +1184,16 @@ If the kernel has been compiled with the option, then debugging information will also be reported when this variable is set. .It Li ip.forwarding -Returns 1 when +If set to 1, then .Tn IP forwarding is enabled for the host, indicating the host is acting as a router. +If set to 2, then +.Tn IP +forwarding is restricted to traffic that has +been IPsec encapsulated or decapsulated by +the host. +The default value is 0. .It Li ip.ipsec-allocs The number of IPsec flows that can use a security association before it expires. |