From: Guus Sliepen Date: Thu, 16 Jan 2014 13:02:56 +0000 (+0100) Subject: Clarify StrictSubnets. X-Git-Tag: 1.0.23-android-1~3 X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=commitdiff_plain;h=d5113a9a37d72616d6cd50f6f63b3dd7ebcf8e04 Clarify StrictSubnets. --- diff --git a/doc/tinc.conf.5.in b/doc/tinc.conf.5.in index 1e109e2b..71963926 100644 --- a/doc/tinc.conf.5.in +++ b/doc/tinc.conf.5.in @@ -428,7 +428,8 @@ traffic. When this option is enabled tinc will only use Subnet statements which are present in the host config files in the local .Pa @sysconfdir@/tinc/ Ns Ar NETNAME Ns Pa /hosts/ -directory. +directory. Subnets learned via connections to other nodes and which are not +present in the local host config files are ignored. .It Va TunnelServer Li = yes | no Po no Pc Bq experimental When this option is enabled tinc will no longer forward information between other tinc daemons, and will only allow connections with nodes for which host config files are present in the local diff --git a/doc/tinc.texi b/doc/tinc.texi index 2aba7034..ba1f9b51 100644 --- a/doc/tinc.texi +++ b/doc/tinc.texi @@ -1105,6 +1105,8 @@ traffic. When this option is enabled tinc will only use Subnet statements which are present in the host config files in the local @file{@value{sysconfdir}/tinc/@var{netname}/hosts/} directory. +Subnets learned via connections to other nodes and which are not +present in the local host config files are ignored. @cindex TunnelServer @item TunnelServer = (no) [experimental]