Makefile        1.5   --> 1.8
        article.sgml    1.18  --> 1.23
  PR:
        docs/145354

Approved by: maxim (mentor), marck (mentor)
This commit is contained in:
Taras Korenko 2010-07-05 08:45:41 +00:00
parent 555d4451e4
commit 7b30d4991a
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=35966
2 changed files with 56 additions and 63 deletions
ru_RU.KOI8-R/articles/checkpoint

View file

@ -4,7 +4,7 @@
# $FreeBSD$
# $FreeBSDru: frdp/doc/ru_RU.KOI8-R/articles/checkpoint/Makefile,v 1.1 2004/01/10 08:43:19 andy Exp $
#
# Original revision: 1.5
# Original revision: 1.8
#
DOC?= article
@ -14,10 +14,9 @@ FORMATS?= html
INSTALL_COMPRESSED?=gz
INSTALL_ONLY_COMPRESSED?=
SRCS= article.sgml
SRCS= article.sgml
IMAGES_EN= networks.pic
URL_RELPREFIX?= ../../../..
DOC_PREFIX?= ${.CURDIR}/../../..
.include "${DOC_PREFIX}/share/mk/doc.project.mk"

View file

@ -3,7 +3,7 @@
$FreeBSDru: frdp/doc/ru_RU.KOI8-R/articles/checkpoint/article.sgml,v 1.5 2004/07/16 12:05:55 den Exp $
Original revision: 1.18
Original revision: 1.23
-->
<!-- Copyright (c) 2001 The FreeBSD Documentation Project
@ -37,12 +37,10 @@
-->
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook V4.1-Based Extension//EN" [
<!ENTITY % man PUBLIC "-//FreeBSD//ENTITIES DocBook Manual Page Entities//EN">
%man;
<!ENTITY % articles.ent PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Articles Entity Set//EN">
%articles.ent;
<!ENTITY legalnotice SYSTEM "../../share/sgml/legalnotice.sgml">
<!ENTITY % trademarks PUBLIC "-//FreeBSD//ENTITIES DocBook Trademark Entities//RU">
%trademarks;
]>
<article lang="ru">
@ -76,7 +74,9 @@
<pubdate>$FreeBSD$</pubdate>
<copyright>
<year>2001, 2002, 2003</year>
<year>2001</year>
<year>2002</year>
<year>2003</year>
<holder role="mailto:jono@securityreports.com">Jon Orbeton</holder>
</copyright>
@ -139,8 +139,7 @@ options IPSEC_ESP
options IPSEC_DEBUG</programlisting>
<para>äÌÑ ÐÏÌÕÞÅÎÉÑ ÉÎÆÏÒÍÁÃÉÉ ÐÏ ÐÏÓÔÒÏÅÎÉÀ ÎÅÓÔÁÎÄÁÒÔÎÏÇÏ ÑÄÒÁ,
ÏÂÒÁÔÉÔÅÓØ Ë <ulink
url="http://www.FreeBSD.org/doc/ru_RU.KOI8-R/books/handbook/kernelconfig.html">
ÏÂÒÁÔÉÔÅÓØ Ë <ulink url="&url.books.handbook;/kernelconfig.html">
òÕËÏ×ÏÄÓÔ×Õ ÐÏ FreeBSD</ulink>. ðÏÖÁÌÕÊÓÔÁ, ÚÁÍÅÔØÔÅ, ÞÔÏ ÍÅÖÄÕ ÈÏÓÔÁÍÉ
<trademark class='registered'>Firewall-1</trademark> É
<acronym>GW</acronym> Ó FreeBSD ÄÏÌÖÎÙ ÂÙÔØ ÒÁÚÒÅÛÅÎÙ ÓÏÅÄÉÎÅÎÉÑ
@ -296,77 +295,77 @@ END
#
# search this file for pre_shared_key with various ID key.
#
path pre_shared_key "/usr/local/etc/racoon/psk.txt" ;
log debug;
path pre_shared_key "/usr/local/etc/racoon/psk.txt" ;
log debug;
#
# "padding" defines some parameter of padding. You should not touch these.
#
padding
padding
{
maximum_length 20; # maximum padding length.
randomize off; # enable randomize length.
strict_check off; # enable strict check.
exclusive_tail off; # extract last one octet.
maximum_length 20; # maximum padding length.
randomize off; # enable randomize length.
strict_check off; # enable strict check.
exclusive_tail off; # extract last one octet.
}
listen
listen
{
#isakmp ::1 [7000];
#isakmp 0.0.0.0 [500];
#admin [7002]; # administrative port by kmpstat.
#strict_address; # required all addresses must be bound.
#isakmp ::1 [7000];
#isakmp 0.0.0.0 [500];
#admin [7002]; # administrative port by kmpstat.
#strict_address; # required all addresses must be bound.
}
#
# Specification of default various timers.
#
timer
timer
{
#
# These values can be changed per remote node.
#
counter 5; # maximum trying count to send.
interval 20 sec; # maximum interval to resend.
persend 1; # the number of packets per a send.
counter 5; # maximum trying count to send.
interval 20 sec; # maximum interval to resend.
persend 1; # the number of packets per a send.
#
# timer for waiting to complete each phase.
#
phase1 30 sec;
phase2 15 sec;
phase1 30 sec;
phase2 15 sec;
}
remote anonymous
remote anonymous
{
exchange_mode aggressive,main; # For Firewall-1 Aggressive mode
exchange_mode aggressive,main; # For Firewall-1 Aggressive mode
#my_identifier address;
#my_identifier user_fqdn "";
#my_identifier address "";
#peers_identifier address "";
#certificate_type x509 "" "";
#my_identifier address;
#my_identifier user_fqdn "";
#my_identifier address "";
#peers_identifier address "";
#certificate_type x509 "" "";
nonce_size 16;
lifetime time 10 min; # sec,min,hour
lifetime byte 5 MB; # B,KB,GB
initial_contact on;
support_mip6 on;
proposal_check obey; # obey, strict or claim
nonce_size 16;
lifetime time 10 min; # sec,min,hour
lifetime byte 5 MB; # B,KB,GB
initial_contact on;
support_mip6 on;
proposal_check obey; # obey, strict or claim
proposal {
encryption_algorithm 3des;
hash_algorithm md5;
authentication_method pre_shared_key;
dh_group 2 ;
proposal {
encryption_algorithm 3des;
hash_algorithm md5;
authentication_method pre_shared_key;
dh_group 2 ;
}
}
sainfo anonymous
sainfo anonymous
{
pfs_group 1;
lifetime time 10 min;
lifetime byte 50000 KB;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate ;
pfs_group 1;
lifetime time 10 min;
lifetime byte 50000 KB;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate ;
}</programlisting>
<para>ðÒÏ×ÅÒØÔÅ, ÞÔÏ ÆÁÊÌ
@ -437,17 +436,12 @@ scheme: IKE methods: Combined ESP: 3DES + MD5 + PFS (phase 2 completion) for hos
<itemizedlist>
<listitem>
<para><ulink url="http://www.FreeBSD.org/handbook/ipsec.html">
òÕËÏ×ÏÄÓÔ×Ï FreeBSD: IPsec</ulink></para>
<para>òÕËÏ×ÏÄÓÔ×Ï FreeBSD: VPN ÞÅÒÅÚ IPsec <ulink
url="&url.books.handbook;/ipsec.html"></ulink></para>
</listitem>
<listitem>
<para><ulink url="http://www.kame.net">ðÒÏÅËÔ KAME</ulink></para>
</listitem>
<listitem>
<para><ulink url="http://www.x-itec.de/projects/tuts/ipsec-howto.txt">
ëÒÁÔËÉÊ HOWTO ÐÏ FreeBSD IPsec </ulink></para>
<para>ðÒÏÅËÔ KAME <ulink url="http://www.kame.net"></ulink></para>
</listitem>
</itemizedlist>
</sect1>