projects / linux-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 18feb87) | patch
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT
authorTobias Brunner <tobias@strongswan.org>
Thu, 21 Dec 2017 16:32:24 +0000 (17:32 +0100)
committerDavid S. Miller <davem@davemloft.net>
Tue, 26 Dec 2017 22:14:56 +0000 (17:14 -0500)
commit09ee9dba9611cd382fd360a99ad1c2fa23bfdca8
tree3c9b69538cebcb5945e61633378069e85b8d221btree | snapshot
parent18feb87105c3c16dc01e6981a6aafb175679b997commit | diff
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT

If SNAT modifies the source address the resulting packet might match
an IPsec policy, reinject the packet if that's the case.

The exact same thing is already done for IPv4.

Signed-off-by: Tobias Brunner <tobias@strongswan.org>
Acked-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/ip6_output.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)