[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Marco Pfatschbacher <mpf () cvs ! openbsd ! org>
Date:       2009-01-20 14:36:19
Message-ID: 200901201436.n0KEaJj9006731 () cvs ! openbsd ! org
[Download RAW message or body]

CVSROOT:	/cvs
Module name:	src
Changes by:	mpf@cvs.openbsd.org	2009/01/20 07:36:19

Modified files:
	sbin/isakmpd   : ipsec.c 
	sbin/ipsecctl  : ike.c ipsec.conf.5 ipsecctl.c ipsecctl.h 
	                 parse.y 

Log message:
Add support to isakmpd(8) and ipsecctl(8) to install SA's with a
different source network than we have negotiated with a peer.
This enables us to do nat/binat on the enc(4) interface.
Very useful to work around rfc 1918 collisions.
Manpage and testing by Mitja Muzenic. Thanks!
OK hshoexer@, markus@. "I like it" todd@

[prev in list] [next in list] [prev in thread] [next in thread]