]> git.baikalelectronics.ru Git - kernel.git/commit
[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 12 Dec 2007 18:44:16 +0000 (10:44 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:22 +0000 (14:57 -0800)
commit6acc50406f7074bb3fd0eafa8d2ffb72a468627b
treef72fa5eb779c8ae7d49688a9caac9b69a1f3bd58
parent278237808e7d2386e1f7ef0400dca4f8de20d324
[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse

RFC 4301 requires us to relookup ICMP traffic that does not match any
policies using the reverse of its payload.  This patch adds the functions
xfrm_decode_session_reverse and xfrmX_policy_check_reverse so we can get
the reverse flow to perform such a lookup.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/xfrm.h
include/net/xfrm.h
net/ipv4/xfrm4_policy.c
net/ipv6/xfrm6_policy.c
net/xfrm/xfrm_policy.c