documented the new PLUTO environment variables available in the updown script

diff --git a/src/_updown/_updown.in b/src/_updown/_updown.in
index 7e7e708b9a8bba3bb1e9cba01f857ba782030539..430a0cff69f34f2fb65ae144042dbb42b62ee70a 100644 (file)
--- a/src/_updown/_updown.in
+++ b/src/_updown/_updown.in
@@ -115,8 +115,18 @@
 #              is  the  UDP/TCP  port  to  which  the IPsec SA  is
 #              restricted on the peer side.
 #
-#              PLUTO_XAUTH_ID
-#                              is an optional user ID employed by the XAUTH protocol
+#       PLUTO_XAUTH_ID
+#              is an optional user ID employed by the XAUTH protocol
+#
+#       PLUTO_MARK_IN
+#              is an optional XFRM mark set on the inbound IPsec SA
+#
+#       PLUTO_MARK_OUT
+#              is an optional XFRM mark set on the outbound IPsec SA
+#
+#       PLUTO_ESP_ENC
+#              contains the remote UDP port in the case of ESP_IN_UDP
+#              encapsulation
 #
 
 # define a minimum PATH environment in case it is not set

diff --git a/src/_updown_espmark/_updown_espmark b/src/_updown_espmark/_updown_espmark
index cd2276bc86bb6f82c656cafb0117df6e93681540..42cd3607be9996e9d80e18a75875775fa7b38db9 100644 (file)
--- a/src/_updown_espmark/_updown_espmark
+++ b/src/_updown_espmark/_updown_espmark
@@ -115,8 +115,19 @@
 #              is  the  UDP/TCP  port  to  which  the IPsec SA  is
 #              restricted on the peer side.
 #
-#              PLUTO_XAUTH_ID
-#                              is an optional user ID employed by the XAUTH protocol
+#       PLUTO_XAUTH_ID
+#              is an optional user ID employed by the XAUTH protocol
+#
+#       PLUTO_MARK_IN
+#              is an optional XFRM mark set on the inbound IPsec SA
+#
+#       PLUTO_MARK_OUT
+#              is an optional XFRM mark set on the outbound IPsec SA
+#
+#       PLUTO_ESP_ENC
+#              contains the remote UDP port in the case of ESP_IN_UDP
+#              encapsulation
+#
 
 # logging of VPN connections
 #