Clarify StrictSubnets.

diff --git a/doc/tinc.conf.5.in b/doc/tinc.conf.5.in
index 1e109e2b54de281e545c4280316f333d330ab7f4..719639260df0fe4bae2df4b52d10743a49793c80 100644 (file)
--- a/doc/tinc.conf.5.in
+++ b/doc/tinc.conf.5.in
@@ -428,7 +428,8 @@ traffic.
 When this option is enabled tinc will only use Subnet statements which are
 present in the host config files in the local
 .Pa @sysconfdir@/tinc/ Ns Ar NETNAME Ns Pa /hosts/
-directory.
+directory. Subnets learned via connections to other nodes and which are not
+present in the local host config files are ignored.
 .It Va TunnelServer Li = yes | no Po no Pc Bq experimental
 When this option is enabled tinc will no longer forward information between other tinc daemons,
 and will only allow connections with nodes for which host config files are present in the local

diff --git a/doc/tinc.texi b/doc/tinc.texi
index 2aba7034d91e21e93f3ad3560183355f9a553e1c..ba1f9b51523e26af62c9813af3010c4be6bceb13 100644 (file)
--- a/doc/tinc.texi
+++ b/doc/tinc.texi
@@ -1105,6 +1105,8 @@ traffic.
 When this option is enabled tinc will only use Subnet statements which are
 present in the host config files in the local
 @file{@value{sysconfdir}/tinc/@var{netname}/hosts/} directory.
+Subnets learned via connections to other nodes and which are not
+present in the local host config files are ignored.
 
 @cindex TunnelServer
 @item TunnelServer = <yes|no> (no) [experimental]