Date: Tue, 25 Feb 2014 22:01:50 +0100 From: Georgios Amanakis <gamanakis@gmail.com> To: bug-followup@FreeBSD.org, a.v.volobuev@gmail.com, andre@freebsd.org, melifaro@FreeBSD.org, freebsd-bugs@freebsd.org, nicolas@deffayet.com Subject: kern/185876: ipfw not matching incoming packets decapsulating ipsec. example l2tp/ipsec Message-ID: <CACvFP_g4L=pK3ZmZ_kSq=OO%2BaZANA9k--n7Uhi1Tp6ULO0JHdw@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
The following patch resolves it (it has to be tested thoroughly).
Index: netipsec/xform_ipip.c
===================================================================
--- netipsec/xform_ipip.c (revision 262492)
+++ netipsec/xform_ipip.c (working copy)
@@ -181,6 +181,7 @@
IPIPSTAT_INC(ipips_ipackets);
m_copydata(m, 0, 1, &v);
+ m_clrprotoflags(m);
switch (v >> 4) {
#ifdef INET
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CACvFP_g4L=pK3ZmZ_kSq=OO%2BaZANA9k--n7Uhi1Tp6ULO0JHdw>