Add a description of the leftdns option to ipsec.conf.5

This commit is contained in:
Martin Willi
2012-08-21 09:38:01 +02:00
parent 63e460542c
commit c60f1da424
+10
View File
@@ -585,6 +585,16 @@ Comma separated list of certificate policy OIDs the peer's certificate must
have. have.
OIDs are specified using the numerical dotted representation. OIDs are specified using the numerical dotted representation.
.TP .TP
.BR leftdns " = <servers>"
Comma separated list of DNS server addresses to exchange as configuration
attributes. On the initiator, a server is a fixed IPv4 / IPv6 address, or
.B %config4
/
.B %config6
to request attributes without an address. On the responder,
only fixed IPv4 /IPv6 addresses are allowed and define DNS servers assigned
to the client.
.TP
.BR leftfirewall " = yes | " no .BR leftfirewall " = yes | " no
whether the left participant is doing forwarding-firewalling whether the left participant is doing forwarding-firewalling
(including masquerading) using iptables for traffic from \fIleftsubnet\fR, (including masquerading) using iptables for traffic from \fIleftsubnet\fR,