[Swan-dev] whack's --clientwithin

Paul Wouters paul at nohats.ca
Mon Oct 6 02:55:02 EEST 2014


On Thu, 2 Oct 2014, D. Hugh Redelmeier wrote:

> Documentation:
>       --clientwithin subnet
>           This option is obsolete and will be removed. Do not use this
> 	   option anymore.
>
> I don't really know what this does and I'd rather not have to reversse
> engineer it.

We should get rid of it (after 3.11) . We had people complain when we
did before but that was years ago.

> I don't think that there is a way of specifying this from ipsec.conf.

libreswan/lib/libipsecconf/keywords.c:	{ "subnetwithin",   kv_conn |
kv_leftright, kt_string,

It is still there.

Paul


More information about the Swan-dev mailing list