netdev
[Top] [All Lists]

Re: [RFC, PATCH 4/5]: netfilter+ipsec - policy lookup

To: Patrick McHardy <kaber@xxxxxxxxx>
Subject: Re: [RFC, PATCH 4/5]: netfilter+ipsec - policy lookup
From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Date: Mon, 22 Mar 2004 13:03:22 +1100
Cc: "David S. Miller" <davem@xxxxxxxxxx>, netdev@xxxxxxxxxxx, netfilter-devel@xxxxxxxxxxxxxxxxxxx
In-reply-to: <405E2673.4090808@xxxxxxxxx>
References: <20040308110331.GA20719@xxxxxxxxxxxxxxxxxxx> <404C874D.4000907@xxxxxxxxx> <20040308115858.75cdddca.davem@xxxxxxxxxx> <4059CF17.8090907@xxxxxxxxx> <20040321221604.GA32277@xxxxxxxxxxxxxxxxxxx> <405E2673.4090808@xxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.5.1+cvs20040105i
On Mon, Mar 22, 2004 at 12:34:11AM +0100, Patrick McHardy wrote:
> Herbert Xu wrote:
> >
> >BTW, you can xfrm4_route_forward here.
> 
> Is it correct that __xfrm_route_forward will use NULL for the sock
> parameter to xfrm_lookup even if the packet is from a local socket ?

No that would be wrong as socket policies won't be applied correctly.
Forget about that idea :)
-- 
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

<Prev in Thread] Current Thread [Next in Thread>