summaryrefslogtreecommitdiff
path: root/sbin
diff options
context:
space:
mode:
authorHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2005-04-09 23:39:49 +0000
committerHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2005-04-09 23:39:49 +0000
commit0282a99a5821663a143e30e12db5c1c0b3083fe0 (patch)
tree0d9b8174375122a3c406d7ed6f5259f6f090a9c8 /sbin
parent68250f11f6968a2a253cc9a539d85df4fb2f0f0c (diff)
clarify in/out a bit, add SEE ALSO section.
Diffstat (limited to 'sbin')
-rw-r--r--sbin/ipsecctl/ipsec.conf.518
1 files changed, 10 insertions, 8 deletions
diff --git a/sbin/ipsecctl/ipsec.conf.5 b/sbin/ipsecctl/ipsec.conf.5
index fde0f7b6c98..1615be7add3 100644
--- a/sbin/ipsecctl/ipsec.conf.5
+++ b/sbin/ipsecctl/ipsec.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ipsec.conf.5,v 1.6 2005/04/09 23:32:22 hshoexer Exp $
+.\" $OpenBSD: ipsec.conf.5,v 1.7 2005/04/09 23:39:48 hshoexer Exp $
.\"
.\" Copyright (c) 2004 Mathieu Sauve-Frankel All rights reserved.
.\"
@@ -75,10 +75,11 @@ nor
.Ar out
are specified,
.Xr ipsecctl 8
-will duplicate this rule using
+will assume the direction
+.Ar out
+for this rule and will construct a proper
.Ar in
-and
-.Ar out .
+rule.
Thus packets in both directions will be matched.
.It Ar from <src> to <dst> peer <remote>
This rule applies for packets with source address
@@ -113,12 +114,13 @@ flow esp from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.12
flow esp out from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.12
flow esp in from 192.168.8.0/24 to 192.168.7.0/24 peer 192.168.3.12
.Ed
-.\".Sh GRAMMAR
-.\".Ed
+.Sh SEE ALSO
+.Xr ipsec 4 ,
+.Xr isakmpd.conf 5 ,
+.Xr ipsecctl 8 ,
+.Xr isakmpd 8
.Sh HISTORY
The
.Nm
file format first appeared in
.Ox 3.8 .
-.\" .Sh CAVEATS
-.\" .Sh BUGS