diff options
| author | Angelos D. Keromytis <angelos@cvs.openbsd.org> | 2001-02-28 01:24:10 +0000 |
|---|---|---|
| committer | Angelos D. Keromytis <angelos@cvs.openbsd.org> | 2001-02-28 01:24:10 +0000 |
| commit | 16fce62050ba065f65aec73f07a9c55d9622473d (patch) | |
| tree | a9034054727801ae366e4a06fb562fdf6f233fad /lib | |
| parent | 2a4a2491982323d1ed3bb51808863ef53fdee32d (diff) | |
ipip.allow can also be set to 2, which skips the loopback spoof
checking (for single-machine testing purposes).
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libc/gen/sysctl.3 | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/lib/libc/gen/sysctl.3 b/lib/libc/gen/sysctl.3 index 13e1ce3374c..cb70656e8ad 100644 --- a/lib/libc/gen/sysctl.3 +++ b/lib/libc/gen/sysctl.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: sysctl.3,v 1.63 2001/02/08 16:07:58 itojun Exp $ +.\" $OpenBSD: sysctl.3,v 1.64 2001/02/28 01:24:09 angelos Exp $ .\" .\" Copyright (c) 1993 .\" The Regents of the University of California. All rights reserved. @@ -757,7 +757,10 @@ When the route times out, the Path MTU Discovery engine will attempt to probe a larger path MTU. .It Li ipip.allow If set to 0, incoming IP-in-IP packets will not be processed. -If set to any other value, processing will occur. +If set to any other value, processing will occur; furthermore, if set +to 2, no checks for spoofing of loopback addresses will be done. +This is useful only for debugging purposes, and should never be used +in production systems. .It Li gre.allow If set to 0, incoming GRE packets will not be processed. If set to any other value, processing will occur. |