From 33d2961d9afe58f2ae3f480ed0e9b9860aec5f36 Mon Sep 17 00:00:00 2001
From: ae <ae@FreeBSD.org>
Date: Thu, 30 Oct 2014 13:53:57 +0000
Subject: MFC r272770:   When tunneling interface is going to insert mbuf into
 netisr queue after stripping   outer header, consider it as new packet and
 clear the protocols flags.

  This fixes problems when IPSEC traffic goes through various tunnels and router
  doesn't send ICMP/ICMPv6 errors.

PR:		174602
Sponsored by:	Yandex LLC
---
 sys/netinet/ip_gre.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'sys/netinet')

diff --git a/sys/netinet/ip_gre.c b/sys/netinet/ip_gre.c
index 776820f..a36a486 100644
--- a/sys/netinet/ip_gre.c
+++ b/sys/netinet/ip_gre.c
@@ -211,7 +211,7 @@ gre_input2(struct mbuf *m ,int hlen, u_char proto)
 	}
 
 	m->m_pkthdr.rcvif = GRE2IFP(sc);
-
+	m_clrprotoflags(m);
 	netisr_queue(isr, m);
 
 	/* Packet is done, no further processing needed. */
-- 
cgit v1.1