diff options
| author | Niklas Hallqvist <niklas@cvs.openbsd.org> | 1999-04-11 19:41:42 +0000 |
|---|---|---|
| committer | Niklas Hallqvist <niklas@cvs.openbsd.org> | 1999-04-11 19:41:42 +0000 |
| commit | 7ab4566c34fb0c170d5805b34cd71d628eb1b501 (patch) | |
| tree | 2a3692c04b3c0ed1032a41936fd4cdecb7b23796 /sys/netinet/ip_esp.h | |
| parent | ecae586b2a272f8463fb63b561d690b87f1d8b4c (diff) | |
Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.
If you are going to use either of AH or ESP or both, enable these in
/etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now
named net.inet.ip.encdebug. Some corrected function signatures too.
Diffstat (limited to 'sys/netinet/ip_esp.h')
| -rw-r--r-- | sys/netinet/ip_esp.h | 20 |
1 files changed, 19 insertions, 1 deletions
diff --git a/sys/netinet/ip_esp.h b/sys/netinet/ip_esp.h index 1b4fe3323f3..6f9d9e76673 100644 --- a/sys/netinet/ip_esp.h +++ b/sys/netinet/ip_esp.h @@ -1,4 +1,4 @@ -/* $OpenBSD: ip_esp.h,v 1.22 1999/02/24 23:45:49 angelos Exp $ */ +/* $OpenBSD: ip_esp.h,v 1.23 1999/04/11 19:41:38 niklas Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), @@ -76,8 +76,26 @@ struct espstat u_int64_t esps_ibytes; /* input bytes */ u_int64_t esps_obytes; /* output bytes */ u_int32_t esps_toobig; /* packet got larger than IP_MAXPACKET */ + u_int32_t esps_pdrops; /* packet blocked due to policy */ }; +/* + * Names for ESP sysctl objects + */ +#define ESPCTL_ENABLE 1 /* Enable ESP processing */ +#define ESPCTL_MAXID 2 + +#define ESPCTL_NAMES { \ + { 0, 0 }, \ + { "enable", CTLTYPE_INT }, \ +} + #ifdef _KERNEL +void esp_input __P((struct mbuf *, ...)); +int esp_output __P((struct mbuf *, struct sockaddr_encap *, + struct tdb *, struct mbuf **)); +int esp_sysctl __P((int *, u_int, void *, size_t *, void *, size_t)); + +extern int esp_enable; struct espstat espstat; #endif /* _Kernel */ |