holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Reconcile ipsec masq implementation and documentation

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1875 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-12-31 18:18:19 +00:00
parent 6ea560de68
commit 24f19507b5
4 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Shorewall2/changelog.txt
View File

@ -202,3 +202,6 @@ Changes since 2.0.3
98) Fix mis-leading typo in tunnels. 98) Fix mis-leading typo in tunnels.
99) Fix brain-dead ipsec option handling in setup_masq(). 99) Fix brain-dead ipsec option handling in setup_masq().
100) Reconcile ipsec masq file implementation with the documentation.

1
Shorewall2/firewall
View File

@ -4884,6 +4884,7 @@ setup_masq()
for option in $options; do for option in $options; do
case $option in case $option in
[Yy]es) ;;
strict) policy="$policy --strict" ;; strict) policy="$policy --strict" ;;
next) policy="$policy --next" ;; next) policy="$policy --next" ;;
reqid=*) policy="$policy --reqid ${option#*=}" ;; reqid=*) policy="$policy --reqid ${option#*=}" ;;

4
Shorewall2/masq
View File

@ -116,6 +116,10 @@
# matches these options will have their source address # matches these options will have their source address
# changed. # changed.
# #
# Yes or yes -- must be the only option listed
# and matches all outbound traffic that will be
# encrypted.
#
# reqid=<number> where <number> is specified # reqid=<number> where <number> is specified
# using setkey(8) using the 'unique:<number> # using setkey(8) using the 'unique:<number>
# option for the SPD level. # option for the SPD level.

2
Shorewall2/releasenotes.txt
View File

@ -520,7 +520,7 @@ New Features:
The OPTIONS, IN OPTIONS and OUT OPTIONS columns specify the The OPTIONS, IN OPTIONS and OUT OPTIONS columns specify the
input-output, input and output characteristics of the security input-output, input and output characteristics of the security
policies to be used to decrypt (input) or encrypt (output) traffic associations to be used to decrypt (input) or encrypt (output) traffic
to/from the zone. to/from the zone.
The available options are: The available options are: