CVSROOT: /cvs
Module name: src
Changes by: m...@cvs.openbsd.org 2009/01/20 07:36:19
Modified files:
sbin/isakmpd : ipsec.c
sbin/ipsecctl : ike.c ipsec.conf.5 ipsecctl.c ipsecctl.h
parse.y
Log message:
Add support to isakmpd(8) and ipsecctl(8) to install SA's with a
different source network than we have negotiated with a peer.
This enables us to do nat/binat on the enc(4) interface.
Very useful to work around rfc 1918 collisions.
Manpage and testing by Mitja Muzenic. Thanks!
OK hshoexer@, mar...@. "I like it" todd@
