Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/crypto/dist/ipsec-tools/src/setkey Drop trailing whitespace ...
details: https://anonhg.NetBSD.org/src/rev/dceab4d1552d
branches: trunk
changeset: 581113:dceab4d1552d
user: wiz <wiz%NetBSD.org@localhost>
date: Wed May 25 10:09:36 2005 +0000
description:
Drop trailing whitespace and a grammar fix.
diffstat:
crypto/dist/ipsec-tools/src/setkey/setkey.8 | 22 +++++++++++-----------
1 files changed, 11 insertions(+), 11 deletions(-)
diffs (48 lines):
diff -r 1369009902b4 -r dceab4d1552d crypto/dist/ipsec-tools/src/setkey/setkey.8
--- a/crypto/dist/ipsec-tools/src/setkey/setkey.8 Wed May 25 10:05:22 2005 +0000
+++ b/crypto/dist/ipsec-tools/src/setkey/setkey.8 Wed May 25 10:09:36 2005 +0000
@@ -1,4 +1,4 @@
-.\" $NetBSD: setkey.8,v 1.11 2005/05/08 08:57:26 manu Exp $
+.\" $NetBSD: setkey.8,v 1.12 2005/05/25 10:09:36 wiz Exp $
.\"
.\" $KAME: setkey.8,v 1.93 2003/09/24 23:44:46 itojun Exp $
.\"
@@ -94,7 +94,7 @@
system because it is referenced by some SPD entries.
.It Fl D
Dump the SAD entries.
-If
+If
.Fl P ,
is also specified, SPD entries are dumped.
If
@@ -637,20 +637,20 @@
The rule order is very important.
.Pp
When NAT-T is enabled in the kernel, policy matching for ESP over
-UDP packets may be done on endpoint addresses and port
-(this depends on the system.
-System that do not perform the port check cannot support
-multiple endpoints behind the same NAT).
-When using ESP over UDP, you can specify port numbers in the endpoint
-addresses to get the correct matching.
+UDP packets may be done on endpoint addresses and port
+(this depends on the system.
+System that do not perform the port check cannot support
+multiple endpoints behind the same NAT).
+When using ESP over UDP, you can specify port numbers in the endpoint
+addresses to get the correct matching.
Here is an example:
.Bd -literal -offset
-spdadd 10.0.11.0/24[any] 10.0.11.33/32[any] any -P out ipsec
+spdadd 10.0.11.0/24[any] 10.0.11.33/32[any] any -P out ipsec
esp/tunnel/192.168.0.1[4500]-192.168.1.2[30000]/require ;
.Ed
-These ports must be left unspecified (which defaults to 0) for
-anything else than ESP over UDP.
+These ports must be left unspecified (which defaults to 0) for
+anything other than ESP over UDP.
They can be displayed in SPD dump using
.Nm
.Fl DPp .
Home |
Main Index |
Thread Index |
Old Index