Re: [PATCH 2.6]: Check against correct policy list in ip_forward/ip6_forward

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

On Sun, Oct 17, 2004 at 05:48:11PM +0200, Patrick McHardy wrote:
> 
> currently forwarded packets from a tunnel mode SA are checked
> in ip_forward/ip6_forward against the XFRM_POLICY_FWD policy
> list. Neither racoon nor pluto generate a policy for
> IPSEC_DIR_FWD, so the checks are performed against an empty

Actually I made damn sure that pluto does generate rules for
IPSEC_DIR_FWD after discussing it with Alexey :) Search for
XFRM_POLICY_FWD in openswan/programs/pluto.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt