summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--sbin/ipsecctl/ipsecctl.846
1 files changed, 37 insertions, 9 deletions
diff --git a/sbin/ipsecctl/ipsecctl.8 b/sbin/ipsecctl/ipsecctl.8
index 7f17447b515..50b5a866687 100644
--- a/sbin/ipsecctl/ipsecctl.8
+++ b/sbin/ipsecctl/ipsecctl.8
@@ -1,21 +1,49 @@
-.\" $OpenBSD: ipsecctl.8,v 1.2 2005/04/04 22:22:55 hshoexer Exp $
+.\" $OpenBSD: ipsecctl.8,v 1.3 2005/04/04 22:43:54 hshoexer Exp $
.\"
.\" The following requests are required for all man pages.
-.Dd Month DD, YYYY
-.Dt NAME SECTION#
+.Dd April, 5, 2005
+.Dt IPSECCTL 8
.Os
.Sh NAME
-.Nm program
-.Nd one line about what it does
+.Nm ipsecctl
+.Nd "control flows for IPsec
.Sh SYNOPSIS
.\" For a program: program [-abc] file ...
-.Nm program
-.Op Fl abc
-.Ar
+.Nm ipsecctl
+.Op Fl Fhnvs
+.Op Fl f Ar file
.Sh DESCRIPTION
The
.Nm
-utility processes files ...
+utility controls flows that determining which packets are to be processed by
+IPsec.
+It allows ruleset configuration and retrieval of status information from the
+kernels SPD (Security Policy Database).
+.Pp
+The ruleset grammar is described in
+.Xr ipsec.conf 5 .
+.Pp
+The options are as follows:
+.Bl -tag -width Ds
+.It Fl f Ar file
+Load the rules contained in
+.Ar file .
+.It Fl F
+The
+.Fl F
+option flushes the SPD.
+.It Fl h
+Help.
+.It Fl n
+Do not actually load rules, just parse them.
+.It Fl v
+Produce more verbose output.
+A second use of
+.Fl v
+will produce even more verbose output.
+.It Fl s
+Show the ruleset loaded into the SPD.
+
.\" The following requests should be uncommented and used where appropriate.
.\" This next request is for sections 2, 3, and 9 function return values only.
.\" .Sh RETURN VALUES