Date: Fri, 18 May 2018 10:18:11 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 228108] if_ipsec drops all the icmp v4&v6 error messages Message-ID: <bug-228108-7501-AiKf2v63lV@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-228108-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-228108-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=228108 --- Comment #6 from commit-hook@freebsd.org --- A commit references this bug: Author: ae Date: Fri May 18 10:17:13 UTC 2018 New revision: 333785 URL: https://svnweb.freebsd.org/changeset/base/333785 Log: MFC r333497: Apply the change from r272770 to if_ipsec(4) interface. It is guaranteed that if_ipsec(4) interface is used only for tunnel mode IPsec, i.e. decrypted and decapsulated packet has its own IP header. Thus we can consider it as new packet and clear the protocols flags. This allows ICMP/ICMPv6 properly handle errors that may cause this packet. PR: 228108 Approved by: re (kib) Changes: _U stable/11/ stable/11/sys/net/if_ipsec.c -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-228108-7501-AiKf2v63lV>