1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-29 12:03:03 +00:00
freebsd/sys/netkey
Hajimu UMEMOTO e9d3164d29 Fixed the behavior when there is no inbound policy for the ipsec
tunneled packet.
When there is no suitable inbound policy for the packet of the ipsec
tunnel mode, the kernel never decapsulate the tunneled packet
as the ipsec tunnel mode even when the system wide policy is "none".
Then the kernel leaves the generic tunnel module to process this
packet.  If there is no rule of the generic tunnel, the packet
is rejected and the statistics will be counted up.

Obtained from:	KAME
MFC after:	1 week
2001-11-06 22:45:29 +00:00
..
key_debug.c - net.inet.ipsec.esp_auth hasn't been there 2001-11-05 16:46:24 +00:00
key_debug.h - net.inet.ipsec.esp_auth hasn't been there 2001-11-05 16:46:24 +00:00
key_var.h - net.inet.ipsec.esp_auth hasn't been there 2001-11-05 16:46:24 +00:00
key.c Fixed the behavior when there is no inbound policy for the ipsec 2001-11-06 22:45:29 +00:00
key.h Sync with recent KAME. 2001-06-11 12:39:29 +00:00
keydb.c sync with kame tree as of july00. tons of bug fixes/improvements. 2000-07-04 16:35:15 +00:00
keydb.h Sync with recent KAME. 2001-06-11 12:39:29 +00:00
keysock.c - net.inet.ipsec.esp_auth hasn't been there 2001-11-05 16:46:24 +00:00
keysock.h sync with kame tree as of july00. tons of bug fixes/improvements. 2000-07-04 16:35:15 +00:00