Bad doc pointer?
Hugh Daniel <[email protected]>
| Newsgroups | gmane.network.freeswan.devel |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE-----
Currently in the run up to 2.00 we have a flie:
/etc/ipsec.d/policies/block
and in that file is the line:
# See /usr/local/share/doc/freeswan/policygroups.html for details.
Yet the obvious command fails:
lynx /usr/local/share/doc/freeswan/policygroups.html for details.
...
Can't Access `file://localhost/usr/local/share/doc/freeswan/policygroups.html'
...
and sure enough there is only ONE file in that subtree:
/usr/local/share/doc/freeswan/ipsec.conf-sample
so off I go looking:
root# find /usr/local/ -name policygroups.html
root#
Matter of fact that file is never getting installed anywhere:
root# find / -name policygroups.html | xargs ls -l
- -rw-r--r-- 1 79 304 16671 Feb 15 21:46 /usr/src/freeswan-2.00-pre8-cand1/doc/policygroups.html
- -rw-r--r-- 1 79 304 16456 Feb 13 02:21 /usr/src/freeswan-2.00-pre8-cand1/doc/src/policygroups.html
I also note that there is no RCSID tag in the policies/block file.
I also read this:
# This file defines the set of CIDRs (network/mask-length) to which
# communication should never be allowed.
and I guess I can't use FQDN's here? I was not sure quite what was
not allowed, so I read the doc file referenced (once I found it) and
found this:
"""
block
Block listed IP addresses from communicating with this machine.
"""
So maybe the IP address (not CIDR?) can't send packets to me but I
can send packets to it? To deal with this confusion I used to call
this policy blockdrop.
I can't find anything in the man pages on what the default policy
groups do.
||ugh Daniel
Testing Fool
[email protected]
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPk+KQFZpdJR7FBQRAQF2MAP7BNtxfSCk3wbyA4/gmkfvoStwtOdnzGPT
i5s5HaNYFTWQsMKtaMW722W6hDUOBe1BpsaeRNlIJIjNReBv5A4L2iS48YKr0H8T
hPIDGZSJTrySJn+O99/z7AML2WBGbCcmcDS9oysHB+STFuGC/aHKG2qf7qUz3e32
0WbWyEid1/c=
=TGtA
-----END PGP SIGNATURE-----