summaryrefslogtreecommitdiffstats
path: root/secure
diff options
context:
space:
mode:
authorae <ae@FreeBSD.org>2016-04-24 09:02:17 +0000
committerae <ae@FreeBSD.org>2016-04-24 09:02:17 +0000
commitdcf50398ab66cfcba0ae4484efe3b5ce40fb9824 (patch)
treed456d61d87136ae276d6e3fcba9582c7a643cc03 /secure
parent3b2a510b4d4d97a58df91d2297ce08cdae4115f2 (diff)
downloadFreeBSD-src-dcf50398ab66cfcba0ae4484efe3b5ce40fb9824.zip
FreeBSD-src-dcf50398ab66cfcba0ae4484efe3b5ce40fb9824.tar.gz
Handle non-compressed packets for IPComp in tunnel mode.
RFC3173 says that the IP datagram MUST be sent in the original non-compressed form, when the total size of a compressed payload and the IPComp header is not smaller than the size of the original payload. In tunnel mode for small packets IPComp will send encapsulated IP datagrams without IPComp header. Add ip_encap handler for IPPROTO_IPV4 and IPPROTO_IPV6 to handle these datagrams. The handler does lookup for SA related to IPComp protocol and given from mbuf source and destination addresses as tunnel endpoints. It decapsulates packets only when corresponding SA is found. Reported by: gnn Reviewed by: gnn Differential Revision: https://reviews.freebsd.org/D6062
Diffstat (limited to 'secure')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud