doc: document the behavior of restrict-user-to-routes in case of defaultroute

This commit is contained in:
Nikos Mavrogiannopoulos
2015-11-29 20:24:32 +01:00
parent b11567dd64
commit 53376c96a2
2 changed files with 6 additions and 6 deletions

View File

@@ -468,9 +468,9 @@ no-route = 192.168.5.0/255.255.255.0
# If set, the script /usr/bin/ocserv-fw will be called to restrict # If set, the script /usr/bin/ocserv-fw will be called to restrict
# the user to its allowed routes and prevent him from accessing # the user to its allowed routes and prevent him from accessing
# any other routes. All the routes applied by ocserv can be reverted # any other routes. In case of defaultroute, the no-routes are restricted.
# using /usr/bin/ocserv-fw --removeall. This option can be set globally # All the routes applied by ocserv can be reverted using /usr/bin/ocserv-fw
# or in the per-user configuration. # --removeall. This option can be set globally or in the per-user configuration.
#restrict-user-to-routes = true #restrict-user-to-routes = true
# When set to true, all client's iroutes are made visible to all # When set to true, all client's iroutes are made visible to all

View File

@@ -556,9 +556,9 @@ no-route = 192.168.5.0/255.255.255.0
# If set, the script /usr/bin/ocserv-fw will be called to restrict # If set, the script /usr/bin/ocserv-fw will be called to restrict
# the user to its allowed routes and prevent him from accessing # the user to its allowed routes and prevent him from accessing
# any other routes. All the routes applied by ocserv can be reverted # any other routes. In case of defaultroute, the no-routes are restricted.
# using /usr/bin/ocserv-fw --removeall. This option can be set globally # All the routes applied by ocserv can be reverted using /usr/bin/ocserv-fw
# or in the per-user configuration. # --removeall. This option can be set globally or in the per-user configuration.
#restrict-user-to-routes = true #restrict-user-to-routes = true
# When set to true, all client's iroutes are made visible to all # When set to true, all client's iroutes are made visible to all