diff options
| author | Jean-Jacques Bernard-Gundol <jjbg@cvs.openbsd.org> | 2001-07-06 19:35:39 +0000 |
|---|---|---|
| committer | Jean-Jacques Bernard-Gundol <jjbg@cvs.openbsd.org> | 2001-07-06 19:35:39 +0000 |
| commit | fb8a665ccadcdc0ace140ceaa34150a70f883308 (patch) | |
| tree | fb924f07db22e9e0f2630a2f749cb3bf85f60e74 | |
| parent | f533f176dd25c3446dc569a16cf6df042ec9ac1c (diff) | |
Don't use enc0 interface for IPComp. angelos@ ok.
| -rw-r--r-- | sys/netinet/ipsec_input.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/sys/netinet/ipsec_input.c b/sys/netinet/ipsec_input.c index 5cb26b282bd..17b8e0cec25 100644 --- a/sys/netinet/ipsec_input.c +++ b/sys/netinet/ipsec_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ipsec_input.c,v 1.49 2001/07/05 16:45:55 jjbg Exp $ */ +/* $OpenBSD: ipsec_input.c,v 1.50 2001/07/06 19:35:38 jjbg Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), * Angelos D. Keromytis (kermit@csd.uch.gr) and @@ -218,7 +218,8 @@ ipsec_common_input(struct mbuf *m, int skip, int protoff, int af, int sproto) return ENXIO; } - if (tdbp->tdb_dst.sa.sa_family == AF_INET) { + if (tdbp->tdb_dst.sa.sa_family == AF_INET && + sproto != IPPROTO_IPCOMP) { /* * XXX The fragment conflicts with scoped nature of * IPv6, so do it for only for IPv4 for now. |