diff options
| author | Reyk Floeter <reyk@cvs.openbsd.org> | 2012-10-18 15:18:58 +0000 |
|---|---|---|
| committer | Reyk Floeter <reyk@cvs.openbsd.org> | 2012-10-18 15:18:58 +0000 |
| commit | 2a3459992748c304fff0e64a062c25797482fec5 (patch) | |
| tree | f3f589e0f1b46d65eb161cfaad7ff136502582b1 /sbin/iked | |
| parent | 814a8549472749080b04fc1a4c291134ef69728f (diff) | |
Disallow tables and interface address pools for rdr-to, nat-to and
route-to with any other scheduling algorithms than round-robin or
least-states. Before this change, pfctl accepted and loaded invalid
address pools, eg. "rdr-to <table> source-hash", but it is not
supported by the kernel and was silently ignored in operation.
Also clarify the manpage a bit by mentioning that tables are only
valid with round-robin or least-states.
ok zinke@
Diffstat (limited to 'sbin/iked')
0 files changed, 0 insertions, 0 deletions