]> Git Repo - linux.git/commit - net/ipv6/ip6_output.c
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT
authorTobias Brunner <[email protected]>
Thu, 21 Dec 2017 16:32:24 +0000 (17:32 +0100)
committerDavid S. Miller <[email protected]>
Tue, 26 Dec 2017 22:14:56 +0000 (17:14 -0500)
commit09ee9dba9611cd382fd360a99ad1c2fa23bfdca8
tree3c9b69538cebcb5945e61633378069e85b8d221b
parent18feb87105c3c16dc01e6981a6aafb175679b997
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT

If SNAT modifies the source address the resulting packet might match
an IPsec policy, reinject the packet if that's the case.

The exact same thing is already done for IPv4.

Signed-off-by: Tobias Brunner <[email protected]>
Acked-by: Steffen Klassert <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
net/ipv6/ip6_output.c
This page took 0.048132 seconds and 4 git commands to generate.