Clarify StrictSubnets.

diff --git a/doc/tinc.conf.5.in b/doc/tinc.conf.5.in
index 0480652a31044065871658c0e377d1704835dc73..54517f629359b35658ddd0d974f86646a5f0f55c 100644 (file)
--- a/doc/tinc.conf.5.in
+++ b/doc/tinc.conf.5.in
@@ -446,7 +446,8 @@ traffic.
 When this option is enabled tinc will only use Subnet statements which are
 present in the host config files in the local
 .Pa @sysconfdir@/tinc/ Ns Ar NETNAME Ns Pa /hosts/
-directory.
+directory. Subnets learned via connections to other nodes and which are not
+present in the local host config files are ignored.
 .It Va TunnelServer Li = yes | no Po no Pc Bq experimental
 When this option is enabled tinc will no longer forward information between other tinc daemons,
 and will only allow connections with nodes for which host config files are present in the local

diff --git a/doc/tinc.texi b/doc/tinc.texi
index 04ed6d8f216ba4421286b9edb3f6a8f004f9c55e..3495fce601ee68c0d6fb9a515db8874e6b3fe572 100644 (file)
--- a/doc/tinc.texi
+++ b/doc/tinc.texi
@@ -1197,6 +1197,8 @@ traffic.
 When this option is enabled tinc will only use Subnet statements which are
 present in the host config files in the local
 @file{@value{sysconfdir}/tinc/@var{netname}/hosts/} directory.
+Subnets learned via connections to other nodes and which are not
+present in the local host config files are ignored.
 
 @cindex TunnelServer
 @item TunnelServer = <yes|no> (no) [experimental]