]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 42d3905) | patch
xfrm: Accept ESP packets regardless of UDP encapsulation mode
authorMartin Willi <martin@strongswan.org>
Thu, 4 Dec 2008 23:40:17 +0000 (15:40 -0800)
committerDavid S. Miller <davem@davemloft.net>
Thu, 4 Dec 2008 23:40:17 +0000 (15:40 -0800)
commit892902f66f9b1e799d16bec6985084afd8f30dab
tree7108f6490557641531405d6e0d2ea7d22e58547ftree | snapshot
parent42d39054cdbe5c45f2034d585e5de34e730b7892commit | diff
xfrm: Accept ESP packets regardless of UDP encapsulation mode

From: Martin Willi <martin@strongswan.org>

An IPsec node speaking IKEv2 MUST accept incoming UDP encapsulated
ESP packets, even if no NAT situation is detected. This is important
if MOBIKE is in use. Some implementation keep the encapsulation
mode if they move out of a NAT situation.

Signed-off-by: David S. Miller <davem@davemloft.net>
net/xfrm/xfrm_input.c diff | blob | history
Linux Kernel Source Tree.