]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e2938ad) | patch
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT
authorTobias Brunner <tobias@strongswan.org>
Thu, 21 Dec 2017 16:32:24 +0000 (17:32 +0100)
committerDavid S. Miller <davem@davemloft.net>
Tue, 26 Dec 2017 22:14:56 +0000 (17:14 -0500)
commitb50c1e562ef090e65e29a33907bbe27e96324908
tree3c9b69538cebcb5945e61633378069e85b8d221btree | snapshot
parente2938adb56f190a6f63442b513951e9d0137ecb3commit | diff
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT

If SNAT modifies the source address the resulting packet might match
an IPsec policy, reinject the packet if that's the case.

The exact same thing is already done for IPv4.

Signed-off-by: Tobias Brunner <tobias@strongswan.org>
Acked-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/ip6_output.c diff | blob | history
Linux Kernel Source Tree.