Date: Thu, 19 Feb 2004 06:57:22 -0800 (PST) From: Hajimu UMEMOTO <ume@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet6 ip6_forward.c Message-ID: <200402191457.i1JEvMad079418@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
ume 2004/02/19 06:57:22 PST
FreeBSD src repository
Modified files:
sys/netinet6 ip6_forward.c
Log:
- call ip6_output() instead of nd6_output() when ipsec tunnel
mode is applied, since tunneled packets are considered to be
generated packets from a tunnel encapsulating node.
- tunnel mode may not be applied if SA mode is ANY and policy
does not say "tunnel it". check if we have extra IPv6 header
on the packet after ipsec6_output_tunnel() and call ip6_output()
only if additional IPv6 header is added.
- free the copyed packet before returning.
Obtained from: KAME
Revision Changes Path
1.25 +21 -3 src/sys/netinet6/ip6_forward.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200402191457.i1JEvMad079418>