head	1.9;
access;
symbols
	RELENG_8_4:1.9.0.2
	RELENG_9_1_0_RELEASE:1.8.38.1.4.2
	RELENG_9_1:1.8.38.1.0.4
	RELENG_9_1_BP:1.8.38.1
	RELENG_8_3_0_RELEASE:1.8.32.1.8.1
	RELENG_8_3:1.8.32.1.0.8
	RELENG_8_3_BP:1.8.32.1
	RELENG_9_0_0_RELEASE:1.8.38.1.2.1
	RELENG_9_0:1.8.38.1.0.2
	RELENG_9_0_BP:1.8.38.1
	RELENG_9:1.8.0.38
	RELENG_9_BP:1.8
	RELENG_7_4_0_RELEASE:1.8.36.1
	RELENG_8_2_0_RELEASE:1.8.32.1.6.1
	RELENG_7_4:1.8.0.36
	RELENG_7_4_BP:1.8
	RELENG_8_2:1.8.32.1.0.6
	RELENG_8_2_BP:1.8.32.1
	RELENG_8_1_0_RELEASE:1.8.32.1.4.1
	RELENG_8_1:1.8.32.1.0.4
	RELENG_8_1_BP:1.8.32.1
	RELENG_7_3_0_RELEASE:1.8.34.1
	RELENG_7_3:1.8.0.34
	RELENG_7_3_BP:1.8
	RELENG_8_0_0_RELEASE:1.8.32.1.2.1
	RELENG_8_0:1.8.32.1.0.2
	RELENG_8_0_BP:1.8.32.1
	RELENG_8:1.8.0.32
	RELENG_8_BP:1.8
	RELENG_7_2_0_RELEASE:1.8.30.1
	RELENG_7_2:1.8.0.30
	RELENG_7_2_BP:1.8
	RELENG_7_1_0_RELEASE:1.8.28.1
	RELENG_6_4_0_RELEASE:1.8.26.1
	RELENG_7_1:1.8.0.28
	RELENG_7_1_BP:1.8
	RELENG_6_4:1.8.0.26
	RELENG_6_4_BP:1.8
	RELENG_7_0_0_RELEASE:1.8
	RELENG_6_3_0_RELEASE:1.8
	RELENG_7_0:1.8.0.24
	RELENG_7_0_BP:1.8
	RELENG_6_3:1.8.0.22
	RELENG_6_3_BP:1.8
	RELENG_7:1.8.0.20
	RELENG_7_BP:1.8
	RELENG_6_2_0_RELEASE:1.8
	RELENG_6_2:1.8.0.18
	RELENG_6_2_BP:1.8
	RELENG_5_5_0_RELEASE:1.8
	RELENG_5_5:1.8.0.16
	RELENG_5_5_BP:1.8
	RELENG_6_1_0_RELEASE:1.8
	RELENG_6_1:1.8.0.14
	RELENG_6_1_BP:1.8
	RELENG_6_0_0_RELEASE:1.8
	RELENG_6_0:1.8.0.12
	RELENG_6_0_BP:1.8
	RELENG_6:1.8.0.10
	RELENG_6_BP:1.8
	RELENG_5_4_0_RELEASE:1.8
	RELENG_5_4:1.8.0.8
	RELENG_5_4_BP:1.8
	RELENG_4_11_0_RELEASE:1.2.2.3
	RELENG_4_11:1.2.2.3.0.12
	RELENG_4_11_BP:1.2.2.3
	RELENG_5_3_0_RELEASE:1.8
	RELENG_5_3:1.8.0.6
	RELENG_5_3_BP:1.8
	RELENG_5:1.8.0.4
	RELENG_5_BP:1.8
	RELENG_4_10_0_RELEASE:1.2.2.3
	RELENG_4_10:1.2.2.3.0.10
	RELENG_4_10_BP:1.2.2.3
	RELENG_5_2_1_RELEASE:1.8
	RELENG_5_2_0_RELEASE:1.8
	RELENG_5_2:1.8.0.2
	RELENG_5_2_BP:1.8
	RELENG_4_9_0_RELEASE:1.2.2.3
	RELENG_4_9:1.2.2.3.0.8
	RELENG_4_9_BP:1.2.2.3
	RELENG_5_1_0_RELEASE:1.7
	RELENG_5_1:1.7.0.2
	RELENG_5_1_BP:1.7
	RELENG_4_8_0_RELEASE:1.2.2.3
	RELENG_4_8:1.2.2.3.0.6
	RELENG_4_8_BP:1.2.2.3
	RELENG_5_0_0_RELEASE:1.6
	RELENG_5_0:1.6.0.2
	RELENG_5_0_BP:1.6
	RELENG_4_7_0_RELEASE:1.2.2.3
	RELENG_4_7:1.2.2.3.0.4
	RELENG_4_7_BP:1.2.2.3
	RELENG_4_6_2_RELEASE:1.2.2.3
	RELENG_4_6_1_RELEASE:1.2.2.3
	RELENG_4_6_0_RELEASE:1.2.2.3
	RELENG_4_6:1.2.2.3.0.2
	RELENG_4_6_BP:1.2.2.3
	RELENG_4_5_0_RELEASE:1.2.2.2
	RELENG_4_5:1.2.2.2.0.4
	RELENG_4_5_BP:1.2.2.2
	RELENG_4_4_0_RELEASE:1.2.2.2
	RELENG_4_4:1.2.2.2.0.2
	RELENG_4_4_BP:1.2.2.2
	RELENG_4_3_0_RELEASE:1.2.2.1
	RELENG_4_3:1.2.2.1.0.2
	RELENG_4_3_BP:1.2.2.1
	RELENG_4_2_0_RELEASE:1.2.2.1
	RELENG_4_1_1_RELEASE:1.2.2.1
	PRE_SMPNG:1.3
	RELENG_4_1_0_RELEASE:1.2.2.1
	RELENG_4_0_0_RELEASE:1.2
	RELENG_4:1.2.0.2
	RELENG_4_BP:1.2;
locks; strict;
comment	@# @;


1.9
date	2012.11.17.01.54.44;	author svnexp;	state Exp;
branches
	1.9.2.1;
next	1.8;

1.8
date	2003.11.14.17.34.08;	author ume;	state Exp;
branches
	1.8.10.1
	1.8.20.1
	1.8.26.1
	1.8.28.1
	1.8.30.1
	1.8.32.1
	1.8.34.1
	1.8.36.1
	1.8.38.1;
next	1.7;

1.7
date	2003.01.01.18.49.01;	author schweikh;	state Exp;
branches;
next	1.6;

1.6
date	2002.05.11.05.55.05;	author dd;	state Exp;
branches;
next	1.5;

1.5
date	2002.04.19.04.46.24;	author suz;	state Exp;
branches;
next	1.4;

1.4
date	2001.06.11.12.39.13;	author ume;	state Exp;
branches;
next	1.3;

1.3
date	2000.07.05.21.54.07;	author kris;	state Exp;
branches;
next	1.2;

1.2
date	2000.02.10.19.42.41;	author shin;	state Exp;
branches
	1.2.2.1;
next	1.1;

1.1
date	2000.01.27.09.28.35;	author shin;	state Exp;
branches;
next	;

1.9.2.1
date	2012.11.17.01.54.44;	author svnexp;	state dead;
branches;
next	1.9.2.2;

1.9.2.2
date	2013.03.28.13.06.16;	author svnexp;	state Exp;
branches;
next	;

1.8.10.1
date	2012.11.17.07.46.17;	author svnexp;	state Exp;
branches;
next	;

1.8.20.1
date	2012.11.17.08.09.01;	author svnexp;	state Exp;
branches;
next	;

1.8.26.1
date	2008.10.02.02.57.24;	author kensmith;	state Exp;
branches;
next	;

1.8.28.1
date	2008.11.25.02.59.29;	author kensmith;	state Exp;
branches;
next	;

1.8.30.1
date	2009.04.15.03.14.26;	author kensmith;	state Exp;
branches;
next	;

1.8.32.1
date	2009.08.03.08.13.06;	author kensmith;	state Exp;
branches
	1.8.32.1.2.1
	1.8.32.1.4.1
	1.8.32.1.6.1
	1.8.32.1.8.1;
next	1.8.32.2;

1.8.32.2
date	2012.11.17.10.37.22;	author svnexp;	state Exp;
branches;
next	;

1.8.32.1.2.1
date	2009.10.25.01.10.29;	author kensmith;	state Exp;
branches;
next	;

1.8.32.1.4.1
date	2010.06.14.02.09.06;	author kensmith;	state Exp;
branches;
next	;

1.8.32.1.6.1
date	2010.12.21.17.09.25;	author kensmith;	state Exp;
branches;
next	;

1.8.32.1.8.1
date	2012.03.03.06.15.13;	author kensmith;	state Exp;
branches;
next	1.8.32.1.8.2;

1.8.32.1.8.2
date	2012.11.17.08.25.54;	author svnexp;	state Exp;
branches;
next	;

1.8.34.1
date	2010.02.10.00.26.20;	author kensmith;	state Exp;
branches;
next	;

1.8.36.1
date	2010.12.21.17.10.29;	author kensmith;	state Exp;
branches;
next	1.8.36.2;

1.8.36.2
date	2012.11.17.08.17.47;	author svnexp;	state Exp;
branches;
next	;

1.8.38.1
date	2011.09.23.00.51.37;	author kensmith;	state Exp;
branches
	1.8.38.1.2.1
	1.8.38.1.4.1;
next	1.8.38.2;

1.8.38.2
date	2012.11.17.11.37.44;	author svnexp;	state Exp;
branches;
next	;

1.8.38.1.2.1
date	2011.11.11.04.20.22;	author kensmith;	state Exp;
branches;
next	1.8.38.1.2.2;

1.8.38.1.2.2
date	2012.11.17.08.37.40;	author svnexp;	state Exp;
branches;
next	;

1.8.38.1.4.1
date	2012.08.05.23.54.33;	author kensmith;	state Exp;
branches;
next	1.8.38.1.4.2;

1.8.38.1.4.2
date	2012.11.17.08.48.32;	author svnexp;	state Exp;
branches;
next	;

1.2.2.1
date	2000.07.15.07.36.21;	author kris;	state Exp;
branches;
next	1.2.2.2;

1.2.2.2
date	2001.07.03.11.02.04;	author ume;	state Exp;
branches;
next	1.2.2.3;

1.2.2.3
date	2002.04.28.05.40.28;	author suz;	state Exp;
branches;
next	1.2.2.4;

1.2.2.4
date	2012.11.17.07.28.10;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.9
log
@Switching exporter and resync
@
text
@Configuring FAITH IPv6-to-IPv4 TCP relay

Kazu Yamamoto and Jun-ichiro itojun Hagino
$KAME: README,v 1.10 2003/01/06 21:40:33 sumikawa Exp $
$FreeBSD: head/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $


Introduction
============

FAITH is an IPv6-to-IPv4 TCP relay.  It performs tcp relay just as some of
firewall-oriented gateway does, but between IPv6 and IPv4 with address
translation.
TCP connections has to be made from IPv6 node to IPv4 node.  FAITH will
not relay connections for the opposite direction.
To perform relays, FAITH daemon needs to be executed on a router between
your local IPv6 site and outside IPv4 network.  The daemon needs to be
invoked per each TCP services (TCP port number).

	IPv4 node "dest" = 123.4.5.6
		|
	[[[[ outside IPv4 ocean ]]]]
		|
	node that runs FAITH-daemon (usually a router)
		|
	==+=====+===+==== IPv6, or IPv4/v6 network in your site ^
	  |	    |						| connection
	clients	  IPv6 node "src"				|

You will have to allocate an IPv6 address prefix to map IPv4 addresses into.
The following description uses 3ffe:0501:ffff:0000:: as example.
Please use a prefix which belongs to your site.
FAITH will make it possible to make an IPv6 TCP connection From IPv6 node
"src", toward IPv4 node "dest", by specifying FAITH-mapped address
3ffe:0501:ffff:0000::123.4.5.6
(which is, 3ffe:0501:ffff:0000:0000:0000:7b04:0506).
The address mapping can be performed by hand:-), by special nameserver on
the network, or by special resolver on the source node.


Setup
=====

The following example assumes:
- You have assigned 3ffe:0501:ffff:0000:: as FAITH adderss prefix.
- You are willing to provide IPv6-to IPv4 TCP relay for telnet.

<<On the translating router on which faithd runs>>

(1) If you have IPv6 TCP server for the "telnet" service, i.e. telnetd via
    inet6d, disable that daemon.  Comment out the line from "inet6d.conf"
    and send the HUP signal to "inet6d".

(2) Execute sysctl as root to enable FAITH support in the kernel.

        # sysctl net.inet6.ip6.keepfaith=1

(3) Route packets toward FAITH prefix into "faith0" interface.

	# ifconfig faith0 up
	# route add -inet6 3ffe:0501:ffff:0000:: -prefixlen 64 ::1
	# route change -inet6 3ffe:0501:ffff:0000:: -prefixlen 64 -ifp faith0

(4) Execute "faithd" by root as follows:

	# faithd telnet /usr/libexec/telnetd telnetd

    1st argument is a service name you are willing to provide TCP relay.
	(it can be specified either by number "23" or by string "telnet")
    2nd argument is a path name for local IPv6 TCP server.  If there is a
    connection toward the router itself, this program will be invoked.
    3rd and the following arguments are arguments for the local IPv6 TCP
    server.  (3rd argument is typically the program name without its path.)

    More examples:

	# faithd ftpd /usr/libexec/ftpd ftpd -l
	# faithd sshd

If inetd(8) on your platform have special support for faithd, it is possible
to setup faithd services via inetd(8).  Consult manpage for details.


<<Routing>>

(4) Make sure that packets whose destinations match the prefix can
reach from the IPv6 host to the translating router.

<<On the IPv6 host>>

There are two ways to translate IPv4 address to IPv6 address:
	(a) Faked by DNS
	(b) Faked by /etc/hosts.

(5.a) Install "newbie" and set up FAITH mode. See kit/ports/newbie.

(5.b) Add an entry into /etc/hosts so that you can resolve hostname into
faked IPv6 addrss.  For example, add the following line for www.netbsd.org:

	3ffe:0501:ffff:0000::140.160.140.252	www.netbsd.org

<<On the translating router on which faithd runs.>>

(6) To see if "faithd" works, watch "/var/log/daemon". Note: please
setup "/etc/syslog.conf" so that LOG_DAEMON messages are to be stored
in "/var/log/daemon".

	<e.g.>
	daemon.*   /var/log/daemon


Access control
==============

Since faithd implements TCP relaying service, it is critical to implement
proper access control to cope with malicious use.  Bad guy may try to
use your relay router to circumvent access controls, or may try to
abuse your network (like sending SPAMs from IPv4 address that belong to you).
Install IPv6 packet filter directives that would reject traffic from
unwanted source.  If you are using inetd-based setup, you may be able to
use access control mechanisms in inetd.


Advanced configuration
======================

If you would like to restrict IPv4 destination for translation, you may
want to do the following:

	# route add -inet6 3ffe:0501:ffff:0000::123.0.0.0 -prefixlen 104 ::1
	# route change -inet6 3ffe:0501:ffff:0000::123.0.0.0 -prefixlen 104 \
		-ifp faith0

By this way, you can restrict IPv4 destination to 123.0.0.0/8.
You may also want to reject packets toward 3ffe:0501:ffff:0000::/64 which
is not in 3ffe:0501:ffff:0000::123.0.0.0/104.  This will be left as excerside
for the reader.

By doing this, you will be able to provide your IPv4 web server to outside
IPv6 customers, without risks of unwanted open relays.

	[[[[ IPv6 network outside ]]]]			|
		|					| connection
	node that runs FAITH-daemon (usually a router)	v
		|
	========+======== IPv4/v6 network in your site
		|			(123.0.0.0/8)
	IPv4 web server
@


1.9.2.1
log
@file README was added on branch RELENG_8_4 on 2013-03-28 13:06:16 +0000
@
text
@d1 148
@


1.9.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 148
Configuring FAITH IPv6-to-IPv4 TCP relay

Kazu Yamamoto and Jun-ichiro itojun Hagino
$KAME: README,v 1.10 2003/01/06 21:40:33 sumikawa Exp $
$FreeBSD: releng/8.4/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $


Introduction
============

FAITH is an IPv6-to-IPv4 TCP relay.  It performs tcp relay just as some of
firewall-oriented gateway does, but between IPv6 and IPv4 with address
translation.
TCP connections has to be made from IPv6 node to IPv4 node.  FAITH will
not relay connections for the opposite direction.
To perform relays, FAITH daemon needs to be executed on a router between
your local IPv6 site and outside IPv4 network.  The daemon needs to be
invoked per each TCP services (TCP port number).

	IPv4 node "dest" = 123.4.5.6
		|
	[[[[ outside IPv4 ocean ]]]]
		|
	node that runs FAITH-daemon (usually a router)
		|
	==+=====+===+==== IPv6, or IPv4/v6 network in your site ^
	  |	    |						| connection
	clients	  IPv6 node "src"				|

You will have to allocate an IPv6 address prefix to map IPv4 addresses into.
The following description uses 3ffe:0501:ffff:0000:: as example.
Please use a prefix which belongs to your site.
FAITH will make it possible to make an IPv6 TCP connection From IPv6 node
"src", toward IPv4 node "dest", by specifying FAITH-mapped address
3ffe:0501:ffff:0000::123.4.5.6
(which is, 3ffe:0501:ffff:0000:0000:0000:7b04:0506).
The address mapping can be performed by hand:-), by special nameserver on
the network, or by special resolver on the source node.


Setup
=====

The following example assumes:
- You have assigned 3ffe:0501:ffff:0000:: as FAITH adderss prefix.
- You are willing to provide IPv6-to IPv4 TCP relay for telnet.

<<On the translating router on which faithd runs>>

(1) If you have IPv6 TCP server for the "telnet" service, i.e. telnetd via
    inet6d, disable that daemon.  Comment out the line from "inet6d.conf"
    and send the HUP signal to "inet6d".

(2) Execute sysctl as root to enable FAITH support in the kernel.

        # sysctl net.inet6.ip6.keepfaith=1

(3) Route packets toward FAITH prefix into "faith0" interface.

	# ifconfig faith0 up
	# route add -inet6 3ffe:0501:ffff:0000:: -prefixlen 64 ::1
	# route change -inet6 3ffe:0501:ffff:0000:: -prefixlen 64 -ifp faith0

(4) Execute "faithd" by root as follows:

	# faithd telnet /usr/libexec/telnetd telnetd

    1st argument is a service name you are willing to provide TCP relay.
	(it can be specified either by number "23" or by string "telnet")
    2nd argument is a path name for local IPv6 TCP server.  If there is a
    connection toward the router itself, this program will be invoked.
    3rd and the following arguments are arguments for the local IPv6 TCP
    server.  (3rd argument is typically the program name without its path.)

    More examples:

	# faithd ftpd /usr/libexec/ftpd ftpd -l
	# faithd sshd

If inetd(8) on your platform have special support for faithd, it is possible
to setup faithd services via inetd(8).  Consult manpage for details.


<<Routing>>

(4) Make sure that packets whose destinations match the prefix can
reach from the IPv6 host to the translating router.

<<On the IPv6 host>>

There are two ways to translate IPv4 address to IPv6 address:
	(a) Faked by DNS
	(b) Faked by /etc/hosts.

(5.a) Install "newbie" and set up FAITH mode. See kit/ports/newbie.

(5.b) Add an entry into /etc/hosts so that you can resolve hostname into
faked IPv6 addrss.  For example, add the following line for www.netbsd.org:

	3ffe:0501:ffff:0000::140.160.140.252	www.netbsd.org

<<On the translating router on which faithd runs.>>

(6) To see if "faithd" works, watch "/var/log/daemon". Note: please
setup "/etc/syslog.conf" so that LOG_DAEMON messages are to be stored
in "/var/log/daemon".

	<e.g.>
	daemon.*   /var/log/daemon


Access control
==============

Since faithd implements TCP relaying service, it is critical to implement
proper access control to cope with malicious use.  Bad guy may try to
use your relay router to circumvent access controls, or may try to
abuse your network (like sending SPAMs from IPv4 address that belong to you).
Install IPv6 packet filter directives that would reject traffic from
unwanted source.  If you are using inetd-based setup, you may be able to
use access control mechanisms in inetd.


Advanced configuration
======================

If you would like to restrict IPv4 destination for translation, you may
want to do the following:

	# route add -inet6 3ffe:0501:ffff:0000::123.0.0.0 -prefixlen 104 ::1
	# route change -inet6 3ffe:0501:ffff:0000::123.0.0.0 -prefixlen 104 \
		-ifp faith0

By this way, you can restrict IPv4 destination to 123.0.0.0/8.
You may also want to reject packets toward 3ffe:0501:ffff:0000::/64 which
is not in 3ffe:0501:ffff:0000::123.0.0.0/104.  This will be left as excerside
for the reader.

By doing this, you will be able to provide your IPv4 web server to outside
IPv6 customers, without risks of unwanted open relays.

	[[[[ IPv6 network outside ]]]]			|
		|					| connection
	node that runs FAITH-daemon (usually a router)	v
		|
	========+======== IPv4/v6 network in your site
		|			(123.0.0.0/8)
	IPv4 web server
@


1.8
log
@- poll(2) support.
- simplify by strdup.
- set ai_protocol in hints to TCP.
- g/c FAITH_NS (no description, not maintained for years)
- warn if connection from IPv4 mapped is reached.
- IPV6_V6ONLY if possible.
- unifdef -UFAITH4.
- drop rsh/rlogin support.
- deal with negative return value from wait3.

Obtained from:	KAME
@
text
@d5 1
a5 1
$FreeBSD$
@


1.8.20.1
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: stable/7/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.10.1
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: stable/6/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.38.1
log
@SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.8.38.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d5 1
a5 1
$FreeBSD: stable/9/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.38.1.4.1
log
@SVN rev 239080 on 2012-08-05 23:54:33Z by kensmith

Copy stable/9 to releng/9.1 as part of the 9.1-RELEASE release process.

Approved by:	re (implicit)
@
text
@@


1.8.38.1.4.2
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: releng/9.1/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.38.1.2.1
log
@SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
@
text
@@


1.8.38.1.2.2
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: releng/9.0/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.36.1
log
@SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
@
text
@@


1.8.36.2
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: releng/7.4/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.34.1
log
@SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
@
text
@@


1.8.32.1
log
@SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
@
text
@@


1.8.32.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d5 1
a5 1
$FreeBSD: stable/8/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.32.1.8.1
log
@SVN rev 232438 on 2012-03-03 06:15:13Z by kensmith

Copy stable/8 to releng/8.3 as part of 8.3-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.8.32.1.8.2
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: releng/8.3/usr.sbin/faithd/README 122679 2003-11-14 17:34:08Z ume $
@


1.8.32.1.6.1
log
@SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
@
text
@@


1.8.32.1.4.1
log
@SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
@
text
@@


1.8.32.1.2.1
log
@SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
@
text
@@


1.8.30.1
log
@SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
@
text
@@


1.8.28.1
log
@SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
@
text
@@


1.8.26.1
log
@SVN rev 183531 on 2008-10-02 02:57:24Z by kensmith

Create releng/6.4 from stable/6 in preparation for 6.4-RC1.

Approved by:	re (implicit)
@
text
@@


1.7
log
@Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,
especially in troff files.
@
text
@d4 1
a4 1
$KAME: README,v 1.8 2001/09/05 03:04:20 itojun Exp $
d7 1
a76 2
	# faithd login /usr/libexec/rlogin rlogind
	# faithd shell /usr/libexec/rshd rshd
@


1.6
log
@sysctl -w -> sysctl

Approved by:	ume
@
text
@d10 1
a10 1
FAITH is a IPv6-to-IPv4 TCP relay.  It performs tcp relay just as some of
d32 1
a32 1
FAITH will make it possible to make a IPv6 TCP connection From IPv6 node
@


1.5
log
@just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.
(based on freebsd4-snap-20020128)

Reviewed by:	ume
MFC after:	1 week
@
text
@d55 1
a55 1
        # sysctl -w net.inet6.ip6.keepfaith=1
@


1.4
log
@Sync with recent KAME.
This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

TODO:
  - The definitions of SADB_* in sys/net/pfkeyv2.h are still different
    from RFC2407/IANA assignment because of binary compatibility
    issue.  It should be fixed under 5-CURRENT.
  - ip6po_m member of struct ip6_pktopts is no longer used.  But, it
    is still there because of binary compatibility issue.  It should
    be removed under 5-CURRENT.

Reviewed by:	itojun
Obtained from:	KAME
MFC after:	3 weeks
@
text
@d4 2
a5 2
$KAME: README,v 1.7 2001/04/25 11:25:19 itojun Exp $
$FreeBSD: src/usr.sbin/faithd/README,v 1.3 2000/07/05 21:54:07 kris Exp $
@


1.3
log
@Sync with latest KAME.

Obtained from:	KAME
@
text
@d4 2
a5 2
$KAME: README,v 1.4 2000/05/31 03:16:14 itojun Exp $
$FreeBSD$
d30 1
a30 1
The following description uses 3ffe:0501:1234:ffff:: as example.
d34 3
a36 3
3ffe:0501:1234:ffff::123.4.5.6
(which is, 3ffe:0501:1234:ffff:0000:0000:7b04:0506).
The address mapping can be performed by hand:-), by speical nameserver on
d44 1
a44 1
- You have assigned 3ffe:0501:1234:ffff:: as FAITH adderss prefix.
d60 2
a61 2
	# route add -inet6 3ffe:0501:1234:ffff:: -prefixlen 64 \
		fe80::xxxx:yyyy:zzzz:wwww%faith0
d65 1
a65 1
	# faithd telnet /usr/local/v6/libexec/telnetd telnetd
d76 3
a78 3
	# faithd login /usr/local/v6/libexec/rlogin rlogind
	# faithd shell /usr/local/v6/libexec/rshd rshd
	# faithd ftpd /usr/local/v6/libexec/ftpd ftpd -l
d81 3
d101 1
a101 1
	3ffe:0501:1234:ffff::140.160.140.252	www.netbsd.org
d113 12
d131 3
a133 2
	# route add -inet6 3ffe:0501:1234:ffff::123.0.0.0 -prefixlen 104 \
		-interface faith0
d136 2
a137 2
You may also want to reject packets toward 3ffe:0501:1234:ffff::/64 which
is not in 3ffe:0501:1234:ffff::123.0.0.0/104.  This will be left as excerside
@


1.2
log
@Wording fixes

Submitted by: charnier
@
text
@d4 2
a5 3
$Id: README,v 1.1.1.1 1999/08/08 23:29:27 itojun Exp $
$FreeBSD: src/usr.sbin/faithd/README,v 1.1 2000/01/27 09:28:35 shin Exp $

d10 1
a10 1
FAITH is a IPv6-to-IPv4 TCP relay.  It performs TCP relay just as some of
d36 1
a36 1
The address mapping can be performed by hand:-), by special nameserver on
d44 1
a44 1
- You have assigned 3ffe:0501:1234:ffff:: as FAITH address prefix.
a59 4
	# route add -inet6 3ffe:0501:1234:ffff:: -prefixlen 64 -interface faith0

	or, on platforms that has problem with "-interface":
	# ifconfig faith0 up
d61 1
a61 2
		fe80:q::xxxx:yyyy:zzzz:wwww
	(the last one is link-local address assigned for faith0)
d79 1
a79 1
	# faithd ssh
d93 1
a93 2
(5.a) Install "newbie" and set up FAITH mode. See kit/ports/newbie of
      KAME package. KAME package is obtained from www.kame.net.
d96 1
a96 1
faked IPv6 address.  For example, add the following line for www.freebsd.org:
d98 1
a98 1
	3ffe:0501:1234:ffff::204.216.27.21	www.freebsd.org
d121 1
a121 1
is not in 3ffe:0501:1234:ffff::123.0.0.0/104.  This will be left as exercise
d127 1
a127 1
	[[[[ IPv6 network outside ]]]]			| 
d131 1
a131 1
	========+======== IPv4/v6 network in your site 
@


1.2.2.1
log
@MFC: Merge KAME 2000/07 code.
@
text
@d4 3
a6 2
$KAME: README,v 1.4 2000/05/31 03:16:14 itojun Exp $
$FreeBSD$
d11 1
a11 1
FAITH is a IPv6-to-IPv4 TCP relay.  It performs tcp relay just as some of
d37 1
a37 1
The address mapping can be performed by hand:-), by speical nameserver on
d45 1
a45 1
- You have assigned 3ffe:0501:1234:ffff:: as FAITH adderss prefix.
d61 4
d66 2
a67 1
		fe80::xxxx:yyyy:zzzz:wwww%faith0
d85 1
a85 1
	# faithd sshd
d99 2
a100 1
(5.a) Install "newbie" and set up FAITH mode. See kit/ports/newbie.
d103 1
a103 1
faked IPv6 addrss.  For example, add the following line for www.netbsd.org:
d105 1
a105 1
	3ffe:0501:1234:ffff::140.160.140.252	www.netbsd.org
d128 1
a128 1
is not in 3ffe:0501:1234:ffff::123.0.0.0/104.  This will be left as excerside
d134 1
a134 1
	[[[[ IPv6 network outside ]]]]			|
d138 1
a138 1
	========+======== IPv4/v6 network in your site
@


1.2.2.2
log
@MFC: Sync with recent KAME.
This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

	etc/defaults/rc.conf:			1.111
	etc/rc.network:				1.98
	etc/rc.network6:			1.20
	lib/libipsec/ipsec_set_policy.3:	1.8
	lib/libipsec/ipsec_strerror.3:		1.7
	lib/libipsec/ipsec_strerror.c:		1.3
	lib/libipsec/ipsec_strerror.h:		1.3
	lib/libipsec/libpfkey.h:		1.2
	lib/libipsec/pfkey.c:			1.3
	lib/libipsec/pfkey_dump.c:		1.3
	lib/libipsec/policy_token.l:		1.5
	lib/libipsec/test-policy.c:		1.4
	sbin/ifconfig/ifconfig.8:		1.42
	sbin/ifconfig/ifconfig.c:		1.63
	sbin/ping6/ping6.8:			1.10
	sbin/ping6/ping6.c:			1.9
	sbin/route/route.c:			1.48, 1.50
	sbin/rtsol/Makefile:			1.4
	share/doc/IPv6/IMPLEMENTATION:		1.3
	share/examples/IPv6/USAGE:		1.3
	share/man/man4/faith.4:			1.10
	share/man/man4/gif.4:			1.9
	share/man/man4/inet6.4:			1.8
	share/man/man4/ip6.4:			1.8
	share/man/man4/ipsec.4:			1.9
	share/man/man4/kame.4:			1.8
	share/man/man4/stf.4:			1.8
	sys/conf/files:				1.534
	sys/crypto/md5.c:			1.4
	sys/crypto/sha1.c:			1.7
	sys/crypto/blowfish/bf_enc.c:		1.4
	sys/crypto/blowfish/bf_locl.h:		1.4
	sys/crypto/blowfish/bf_skey.c:		1.4
	sys/crypto/blowfish/blowfish.h:		1.4
	sys/crypto/cast128/cast128.c:		1.4
	sys/crypto/cast128/cast128.h:		1.4
	sys/crypto/des/des.h:			1.4
	sys/crypto/des/des_ecb.c:		1.4
	sys/crypto/des/des_locl.h:		1.5
	sys/crypto/des/des_setkey.c:		1.4
	sys/crypto/rijndael/boxes-fst.dat:	1.2
	sys/crypto/rijndael/rijndael-alg-fst.c:	1.2, 1.3
	sys/crypto/rijndael/rijndael-alg-fst.h:	1.2
	sys/crypto/rijndael/rijndael-api-fst.c:	1.2
	sys/crypto/rijndael/rijndael-api-fst.h:	1.2
	sys/crypto/rijndael/rijndael_local.h:	1.3
	sys/kern/uipc_domain.c:			1.24
	sys/kern/uipc_mbuf.c:			1.82
	sys/kern/uipc_mbuf2.c:			1.8
	sys/net/if.c:				1.109
	sys/net/if_faith.c:			1.4, 1.5
	sys/net/if_gif.c:			1.10
	sys/net/if_gif.h:			1.4
	sys/net/if_loop.c:			1.61
	sys/net/if_sppp.h:			1.17
	sys/net/if_spppsubr.c:			1.68, 1.69
	sys/net/net_osdep.c:			1.4
	sys/net/net_osdep.h:			1.5
	sys/net/pfkeyv2.h:			1.6
	sys/net/ppp_defs.h:			1.7
	sys/net/rtsock.c:			1.52
	sys/netinet/icmp6.h:			1.4
	sys/netinet/in.c:			1.54
	sys/netinet/in_gif.c:			1.10
	sys/netinet/in_pcb.c:			1.84
	sys/netinet/in_pcb.h:			1.38
	sys/netinet/in_proto.c:			1.56
	sys/netinet/ip6.h:			1.5
	sys/netinet/ip_ecn.c:			1.4
	sys/netinet/ip_ecn.h:			1.4
	sys/netinet/ip_encap.c:			1.4
	sys/netinet/ip_icmp.c:			1.57
	sys/netinet/ip_input.c:			1.171
	sys/netinet/ip_output.c:		1.126
	sys/netinet/ip_var.h:			1.56
	sys/netinet/raw_ip.c:			1.78
	sys/netinet/tcp_input.c:		1.132
	sys/netinet/tcp_output.c:		1.50
	sys/netinet/tcp_subr.c:			1.103
	sys/netinet/tcp_usrreq.c:		1.60
	sys/netinet/udp_usrreq.c:		1.89
	sys/netinet6/ah.h:			1.5
	sys/netinet6/ah6.h:			1.4
	sys/netinet6/ah_core.c:			1.8
	sys/netinet6/ah_input.c:		1.7
	sys/netinet6/ah_output.c:		1.7
	sys/netinet6/dest6.c:			1.6
	sys/netinet6/esp.h:			1.4
	sys/netinet6/esp6.h:			1.4
	sys/netinet6/esp_core.c:		1.5
	sys/netinet6/esp_input.c:		1.7
	sys/netinet6/esp_output.c:		1.5
	sys/netinet6/frag6.c:			1.8
	sys/netinet6/icmp6.c:			1.11
	sys/netinet6/in6.c:			1.12
	sys/netinet6/in6.h:			1.13
	sys/netinet6/in6_cksum.c:		1.4
	sys/netinet6/in6_gif.c:			1.5
	sys/netinet6/in6_ifattach.c:		1.6
	sys/netinet6/in6_ifattach.h:		1.3
	sys/netinet6/in6_pcb.c:			1.15
	sys/netinet6/in6_pcb.h:			1.4
	sys/netinet6/in6_prefix.c:		1.7
	sys/netinet6/in6_prefix.h:		1.5
	sys/netinet6/in6_proto.c:		1.14
	sys/netinet6/in6_rmx.c:			1.4
	sys/netinet6/in6_src.c:			1.4
	sys/netinet6/in6_var.h:			1.8
	sys/netinet6/ip6_ecn.h:			1.4
	sys/netinet6/ip6_forward.c:		1.11
	sys/netinet6/ip6_fw.c:			1.11
	sys/netinet6/ip6_fw.h:			1.11
	sys/netinet6/ip6_input.c:		1.27
	sys/netinet6/ip6_mroute.c:		1.7
	sys/netinet6/ip6_mroute.h:		1.4
	sys/netinet6/ip6_output.c:		1.25
	sys/netinet6/ip6_var.h:			1.7
	sys/netinet6/ip6protosw.h:		1.6
	sys/netinet6/ipcomp.h:			1.2
	sys/netinet6/ipcomp6.h:			1.2
	sys/netinet6/ipcomp_core.c:		1.2
	sys/netinet6/ipcomp_input.c:		1.2
	sys/netinet6/ipcomp_output.c:		1.2
	sys/netinet6/ipsec.c:			1.12
	sys/netinet6/ipsec.h:			1.8
	sys/netinet6/ipsec6.h:			1.5
	sys/netinet6/mld6.c:			1.7
	sys/netinet6/nd6.c:			1.9
	sys/netinet6/nd6.h:			1.7
	sys/netinet6/nd6_nbr.c:			1.9
	sys/netinet6/nd6_rtr.c:			1.7, 1.8
	sys/netinet6/raw_ip6.c:			1.11
	sys/netinet6/route6.c:			1.4
	sys/netinet6/scope6.c:			1.2
	sys/netinet6/udp6_output.c:		1.3
	sys/netinet6/udp6_usrreq.c:		1.15
	sys/netkey/key.c:			1.25
	sys/netkey/key.h:			1.7
	sys/netkey/key_debug.c:			1.14
	sys/netkey/key_debug.h:			1.7
	sys/netkey/key_var.h:			1.4
	sys/netkey/keydb.h:			1.6
	sys/netkey/keysock.c:			1.6
	sys/netsmb/smb_crypt.c:			1.2
	sys/sys/mbuf.h:				1.79, 1.80
	sys/sys/protosw.h:			1.33
	sys/sys/socket.h:			1.54, 1.56
	sys/sys/sockio.h:			1.17
	usr.bin/netstat/inet.c:			1.42
	usr.bin/netstat/inet6.c:		1.10
	usr.bin/netstat/ipsec.c:		1.2
	usr.bin/netstat/main.c:			1.40
	usr.bin/netstat/mroute6.c:		1.5
	usr.bin/netstat/netstat.1:		1.29
	usr.bin/netstat/netstat.h:		1.21
	usr.bin/netstat/route.c:		1.50, 1.51, 1.55
	usr.sbin/faithd/Makefile:		1.6
	usr.sbin/faithd/README:			1.4
	usr.sbin/faithd/faithd.8:		1.9
	usr.sbin/faithd/faithd.c:		1.7
	usr.sbin/faithd/faithd.h:		1.3
	usr.sbin/faithd/ftp.c:			1.5
	usr.sbin/faithd/rsh.c:			1.5
	usr.sbin/faithd/tcp.c:			1.3
	usr.sbin/gifconfig/gifconfig.8:		1.6
	usr.sbin/gifconfig/gifconfig.c:		1.4
	usr.sbin/ifmcstat/ifmcstat.8:		1.3
	usr.sbin/ifmcstat/ifmcstat.c:		1.7
	usr.sbin/mld6query/mld6.c:		1.2
	usr.sbin/mld6query/mld6query.8:		1.2
	usr.sbin/ndp/ndp.8:			1.6
	usr.sbin/ndp/ndp.c:			1.6
	usr.sbin/prefix/Makefile:		1.4
	usr.sbin/rip6query/rip6query.8:		1.4
	usr.sbin/rip6query/rip6query.c:		1.5
	usr.sbin/route6d/route6d.8:		1.6
	usr.sbin/route6d/route6d.c:		1.9
	usr.sbin/route6d/route6d.h:		1.3
	usr.sbin/rrenumd/lexer.l:		1.3
	usr.sbin/rrenumd/parser.y:		1.3
	usr.sbin/rrenumd/rrenumd.8:		1.6
	usr.sbin/rrenumd/rrenumd.c:		1.4
	usr.sbin/rrenumd/rrenumd.conf.5:	1.10
	usr.sbin/rrenumd/rrenumd.h:		1.3
	usr.sbin/rtadvd/advcap.c:		1.4
	usr.sbin/rtadvd/advcap.h:		1.4
	usr.sbin/rtadvd/config.c:		1.7
	usr.sbin/rtadvd/config.h:		1.4
	usr.sbin/rtadvd/dump.c:			1.3
	usr.sbin/rtadvd/dump.h:			1.3
	usr.sbin/rtadvd/if.c:			1.6
	usr.sbin/rtadvd/if.h:			1.4
	usr.sbin/rtadvd/pathnames.h:		1.5
	usr.sbin/rtadvd/rrenum.c:		1.5
	usr.sbin/rtadvd/rrenum.h:		1.4
	usr.sbin/rtadvd/rtadvd.8:		1.8
	usr.sbin/rtadvd/rtadvd.c:		1.6
	usr.sbin/rtadvd/rtadvd.conf.5:		1.6
	usr.sbin/rtadvd/rtadvd.h:		1.4
	usr.sbin/rtadvd/timer.c:		1.4
	usr.sbin/rtadvd/timer.h:		1.4
	usr.sbin/rtsold/Makefile:		1.6
	usr.sbin/rtsold/dump.c:			1.4
	usr.sbin/rtsold/if.c:			1.5
	usr.sbin/rtsold/probe.c:		1.5
	usr.sbin/rtsold/rtsol.c:		1.4
	usr.sbin/rtsold/rtsold.8:		1.5
	usr.sbin/rtsold/rtsold.c:		1.4
	usr.sbin/rtsold/rtsold.h:		1.4
	usr.sbin/setkey/parse.y:		1.3
	usr.sbin/setkey/scriptdump.pl:		1.3
	usr.sbin/setkey/setkey.8:		1.14
	usr.sbin/setkey/setkey.c:		1.3
	usr.sbin/setkey/token.l:		1.5
	usr.sbin/traceroute6/traceroute6.8:	1.7
	usr.sbin/traceroute6/traceroute6.c:	1.8
@
text
@d4 2
a5 2
$KAME: README,v 1.7 2001/04/25 11:25:19 itojun Exp $
$FreeBSD: src/usr.sbin/faithd/README,v 1.2.2.1 2000/07/15 07:36:21 kris Exp $
d30 1
a30 1
The following description uses 3ffe:0501:ffff:0000:: as example.
d34 3
a36 3
3ffe:0501:ffff:0000::123.4.5.6
(which is, 3ffe:0501:ffff:0000:0000:0000:7b04:0506).
The address mapping can be performed by hand:-), by special nameserver on
d44 1
a44 1
- You have assigned 3ffe:0501:ffff:0000:: as FAITH adderss prefix.
d60 2
a61 2
	# route add -inet6 3ffe:0501:ffff:0000:: -prefixlen 64 ::1
	# route change -inet6 3ffe:0501:ffff:0000:: -prefixlen 64 -ifp faith0
d65 1
a65 1
	# faithd telnet /usr/libexec/telnetd telnetd
d76 3
a78 3
	# faithd login /usr/libexec/rlogin rlogind
	# faithd shell /usr/libexec/rshd rshd
	# faithd ftpd /usr/libexec/ftpd ftpd -l
a80 3
If inetd(8) on your platform have special support for faithd, it is possible
to setup faithd services via inetd(8).  Consult manpage for details.

d98 1
a98 1
	3ffe:0501:ffff:0000::140.160.140.252	www.netbsd.org
a109 12
Access control
==============

Since faithd implements TCP relaying service, it is critical to implement
proper access control to cope with malicious use.  Bad guy may try to
use your relay router to circumvent access controls, or may try to
abuse your network (like sending SPAMs from IPv4 address that belong to you).
Install IPv6 packet filter directives that would reject traffic from
unwanted source.  If you are using inetd-based setup, you may be able to
use access control mechanisms in inetd.


d116 2
a117 3
	# route add -inet6 3ffe:0501:ffff:0000::123.0.0.0 -prefixlen 104 ::1
	# route change -inet6 3ffe:0501:ffff:0000::123.0.0.0 -prefixlen 104 \
		-ifp faith0
d120 2
a121 2
You may also want to reject packets toward 3ffe:0501:ffff:0000::/64 which
is not in 3ffe:0501:ffff:0000::123.0.0.0/104.  This will be left as excerside
@


1.2.2.3
log
@MFC:
	just merged cosmetic changes from KAME to ease sync between KAME
	and FreeBSD.  (based on freebsd4-snap-20020128)
@
text
@d4 2
a5 2
$KAME: README,v 1.8 2001/09/05 03:04:20 itojun Exp $
$FreeBSD$
@


1.2.2.4
log
@Switch importer
@
text
@d5 1
a5 1
$FreeBSD: stable/4/usr.sbin/faithd/README 95609 2002-04-28 05:40:29Z suz $
@


1.1
log
@another tcp apps IPv6 updates.(should be make world safe)
  ftp, telnet, ftpd, faithd
  also telnet related sync with crypto, secure, kerberosIV

Obtained from: KAME project
@
text
@d5 1
a5 1
$FreeBSD$
d11 1
a11 1
FAITH is a IPv6-to-IPv4 TCP relay.  It performs tcp relay just as some of
d37 1
a37 1
The address mapping can be performed by hand:-), by speical nameserver on
d45 1
a45 1
- You have assigned 3ffe:0501:1234:ffff:: as FAITH adderss prefix.
d103 1
a103 1
faked IPv6 addrss.  For example, add the following line for www.freebsd.org:
d128 1
a128 1
is not in 3ffe:0501:1234:ffff::123.0.0.0/104.  This will be left as excerside
@

