diff options
| author | Hans-Joerg Hoexer <hshoexer@cvs.openbsd.org> | 2008-11-29 11:33:00 +0000 |
|---|---|---|
| committer | Hans-Joerg Hoexer <hshoexer@cvs.openbsd.org> | 2008-11-29 11:33:00 +0000 |
| commit | 15e21a0a428a64d0bf540e6e9ed10ffe23dcec06 (patch) | |
| tree | 47f8a1a37d55ac628d741451314499d8f69a5568 /sbin | |
| parent | 958f5e3ff56745212e45e0b60388bfeddaf75dc3 (diff) | |
Explain how /32 changes the address type to IPV4_ADDR_SUBNET. From Mitja
Muzenic (mitja at muzenic dot net), many thanks!
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/ipsecctl/ipsec.conf.5 | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/sbin/ipsecctl/ipsec.conf.5 b/sbin/ipsecctl/ipsec.conf.5 index 69e8b4122fe..44b7e12e6e9 100644 --- a/sbin/ipsecctl/ipsec.conf.5 +++ b/sbin/ipsecctl/ipsec.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ipsec.conf.5,v 1.118 2008/04/11 00:05:51 reyk Exp $ +.\" $OpenBSD: ipsec.conf.5,v 1.119 2008/11/29 11:32:59 hshoexer Exp $ .\" .\" Copyright (c) 2004 Mathieu Sauve-Frankel All rights reserved. .\" @@ -22,7 +22,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: April 11 2008 $ +.Dd $Mdocdate: November 29 2008 $ .Dt IPSEC.CONF 5 .Os .Sh NAME @@ -252,6 +252,11 @@ and destination address The keyword .Ar any will match any address (i.e. 0.0.0.0/0). +Host addresses will be parsed as type +.Dq IPV4_ADDR ; +adding the suffix /32 will change the type to +.Dq IPV4_ADDR_SUBNET , +which can improve interoperability with some IKE implementations. The optional .Ic port modifiers restrict the flows to the specified ports. |