From 05015370c7a6222530b0a13564f5f2c18a633002 Mon Sep 17 00:00:00 2001
From: itojun <itojun>
Date: Fri, 14 Apr 2000 09:07:33 +0000
Subject: [PATCH] add security issue.

---
 kame/kame/man/man4/gif.4 | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/kame/kame/man/man4/gif.4 b/kame/kame/man/man4/gif.4
index db667aa1af..534126fb4b 100644
--- a/kame/kame/man/man4/gif.4
+++ b/kame/kame/man/man4/gif.4
@@ -25,7 +25,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.\"     $Id: gif.4,v 1.4 2000/03/12 13:12:27 itojun Exp $
+.\"     $Id: gif.4,v 1.4.2.1 2000/04/14 09:07:33 itojun Exp $
 .\"
 .Dd April 10, 1999
 .Dt GIF 4
@@ -209,6 +209,13 @@ For compatibility, IPv4-in-IPv4 traffic will be matched to
 interfaces first, and then sent to
 .Xr vif 4
 if no match is found.
+.Pp
+.Ss Security
+Malicious party may try to circumvent security filters by using
+tunnelled packets.
+As mentioned above, multi-destination mode
+.Pq Dv IFF_LINK0
+is far less secure than bidirectional mode.
 .\"
 .Sh SEE ALSO
 .Xr inet 4 ,