diff options
| author | ume <ume@FreeBSD.org> | 2004-02-17 14:02:37 +0000 |
|---|---|---|
| committer | ume <ume@FreeBSD.org> | 2004-02-17 14:02:37 +0000 |
| commit | 92aaace6046096db0cee26a2d09ade66657e9b41 (patch) | |
| tree | 303603fd5ead37b54a0b79fac7c02061fb5e5222 /sys/netinet/raw_ip.c | |
| parent | 180ac35cac1b391fa9fb698f9b690a29311b3132 (diff) | |
| download | FreeBSD-src-92aaace6046096db0cee26a2d09ade66657e9b41.zip FreeBSD-src-92aaace6046096db0cee26a2d09ade66657e9b41.tar.gz | |
IPSEC and FAST_IPSEC have the same internal API now;
so merge these (IPSEC has an extra ipsecstat)
Submitted by: "Bjoern A. Zeeb" <bzeeb+freebsd@zabbadoz.net>
Diffstat (limited to 'sys/netinet/raw_ip.c')
| -rw-r--r-- | sys/netinet/raw_ip.c | 11 |
1 files changed, 3 insertions, 8 deletions
diff --git a/sys/netinet/raw_ip.c b/sys/netinet/raw_ip.c index eff86d3..fb95702 100644 --- a/sys/netinet/raw_ip.c +++ b/sys/netinet/raw_ip.c @@ -145,21 +145,16 @@ raw_append(struct inpcb *last, struct ip *ip, struct mbuf *n) { int policyfail = 0; -#ifdef IPSEC +#if defined(IPSEC) || defined(FAST_IPSEC) /* check AH/ESP integrity. */ if (ipsec4_in_reject(n, last)) { policyfail = 1; +#ifdef IPSEC ipsecstat.in_polvio++; - /* do not inject data to pcb */ - } #endif /*IPSEC*/ -#ifdef FAST_IPSEC - /* check AH/ESP integrity. */ - if (ipsec4_in_reject(n, last)) { - policyfail = 1; /* do not inject data to pcb */ } -#endif /*FAST_IPSEC*/ +#endif /*IPSEC || FAST_IPSEC*/ #ifdef MAC if (!policyfail && mac_check_inpcb_deliver(last, n) != 0) policyfail = 1; |
