]> git.baikalelectronics.ru Git - kernel.git/commit
[IPV6] IPSEC: Omit redirect for tunnelled packet.
authorMasahide NAKAMURA <nakam@linux-ipv6.org>
Fri, 24 Aug 2007 10:08:55 +0000 (19:08 +0900)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 10 Oct 2007 23:48:33 +0000 (16:48 -0700)
commitc48489f71496dc446303f5dacb65cb5156e8dbe9
treeed816741827aac7239e24187df09657ff6f0d21d
parent76234fe02ddd041c8bc11ed86bfafde25744a3b9
[IPV6] IPSEC: Omit redirect for tunnelled packet.

IPv6 IPsec tunnel gateway incorrectly sends redirect to
router or sender when network device the IPsec tunnelled packet
is arrived is the same as the one the decapsulated packet
is sent.

With this patch, it omits to send the redirect when the forwarding
skbuff carries secpath, since such skbuff should be assumed as
a decapsulated packet from IPsec tunnel by own.

It may be a rare case for an IPsec security gateway, however
it is not rare when the gateway is MIPv6 Home Agent since
the another tunnel end-point is Mobile Node and it changes
the attached network.

Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/ip6_output.c