Bad doc pointer?

Hugh Daniel <[email protected]>
Newsgroups gmane.network.freeswan.devel
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----

  Currently in the run up to 2.00 we have a flie:

/etc/ipsec.d/policies/block

  and in that file is the line:

# See /usr/local/share/doc/freeswan/policygroups.html for details.

  Yet the obvious command fails:

lynx /usr/local/share/doc/freeswan/policygroups.html for details.
...
Can't Access `file://localhost/usr/local/share/doc/freeswan/policygroups.html'
...

  and sure enough there is only ONE file in that subtree:

/usr/local/share/doc/freeswan/ipsec.conf-sample

  so off I go looking:

root# find /usr/local/ -name policygroups.html
root#

  Matter of fact that file is never getting installed anywhere:

root# find / -name policygroups.html | xargs ls -l
- -rw-r--r--    1 79       304         16671 Feb 15 21:46 /usr/src/freeswan-2.00-pre8-cand1/doc/policygroups.html
- -rw-r--r--    1 79       304         16456 Feb 13 02:21 /usr/src/freeswan-2.00-pre8-cand1/doc/src/policygroups.html

  I also note that there is no RCSID tag in the	policies/block file.

  I also read this:

# This file defines the set of CIDRs (network/mask-length) to which
# communication should never be allowed.

  and I guess I can't use FQDN's here?  I was not sure quite what was
not allowed, so I read the doc file referenced (once I found it) and
found this:

"""
   block
          Block listed IP addresses from communicating with this machine.
"""

  So maybe the IP address (not CIDR?) can't send packets to me but I
can send packets to it?  To deal with this confusion I used to call
this policy blockdrop.

  I can't find anything in the man pages on what the default policy
groups do.

		||ugh Daniel
		Testing Fool
		[email protected]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPk+KQFZpdJR7FBQRAQF2MAP7BNtxfSCk3wbyA4/gmkfvoStwtOdnzGPT
i5s5HaNYFTWQsMKtaMW722W6hDUOBe1BpsaeRNlIJIjNReBv5A4L2iS48YKr0H8T
hPIDGZSJTrySJn+O99/z7AML2WBGbCcmcDS9oysHB+STFuGC/aHKG2qf7qUz3e32
0WbWyEid1/c=
=TGtA
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.