From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Sat, 17 Jul 2010 15:25:01 +0000 (+0200)
Subject: updated NEWS
X-Git-Tag: 4.4.1~38
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b22bb9f21c5637ceb2a4d93680d0b08d3b2ed9a0;p=thirdparty%2Fstrongswan.git

updated NEWS
---

diff --git a/NEWS b/NEWS
index 32b4e501c5..08698f828a 100644
--- a/NEWS
+++ b/NEWS
@@ -2,9 +2,12 @@ strongswan-4.4.1
 ----------------
 
 - Support of xfrm marks in IPsec SAs and IPsec policies introduced
-  with the Linux 2.6.34 kernel. For details see example scenarios
-  ikev2/nat-two-rw-mark and ikev2/net2net-psk-dscp.
+  with the Linux 2.6.34 kernel. For details see the example scenarios
+  ikev2/nat-two-rw-mark, ikev2/rw-nat-mark-in-out and ikev2/net2net-psk-dscp.
 
+- The PLUTO_MARK_IN and PLUTO_ESP_ENC environment variables can be used
+   in the updown scripts to set marks on inbound ESP or ESP_IN_UDP packets.
+ 
 - The openssl plugin now supports X.509 certificate and CRL functions.
 
 - OCSP/CRL checking in IKEv2 has been moved to the revocation plugin, enabled