Hi:
I found out today that packets generated by ipt_REJECT weren't protected
by IPsec. This is because the proto field isn't set at all in the flow
supplied to ip_route_output_key.
The following patch sets that as well as protocol-specific fields so
that the appropriate IPsec policy can be applied.
Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
p
Description: Text document
|