Hi:
I've received a number of reports that the any packets that are modified
by the PREROUTING mangle table will not be protected by IPsec.
The reason is that ip_route_me_harder which is called upon the exit
of the mangle table does not set the proto field. This means that
xfrm_lookup is never called.
The following patch sets the proto field so that the packet can be
protected by IPsec.
Cheers,
--
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
p
Description: Text document
|