diff options
| author | tobhe <tobhe@cvs.openbsd.org> | 2020-01-14 22:28:30 +0000 |
|---|---|---|
| committer | tobhe <tobhe@cvs.openbsd.org> | 2020-01-14 22:28:30 +0000 |
| commit | cd3dfe8f7a93ae564b41cc555ebfc7ba66b1164c (patch) | |
| tree | d4ed9d9cd478c2e32d3736322582ff0f50d76d88 /sbin/iked/types.h | |
| parent | 4ccef1205d0d73910dcc167eb8d58bf359d1de26 (diff) | |
Remove IPsec flow blocking unencrypted IPv6 traffic which was
meant to prevent VPN leakage but repeatedly broke people's
setups. The -6 flag which used to disable the blocking flow is
now ignored and prints a deprecation warning.
ok kn@ bluhm@ phessler@
Diffstat (limited to 'sbin/iked/types.h')
| -rw-r--r-- | sbin/iked/types.h | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sbin/iked/types.h b/sbin/iked/types.h index 4af62afae10..94ceea80a64 100644 --- a/sbin/iked/types.h +++ b/sbin/iked/types.h @@ -1,4 +1,4 @@ -/* $OpenBSD: types.h,v 1.30 2019/05/11 16:30:23 patrick Exp $ */ +/* $OpenBSD: types.h,v 1.31 2020/01/14 22:28:29 tobhe Exp $ */ /* * Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de> @@ -49,7 +49,6 @@ #define IKED_OPT_NONATT 0x00000004 #define IKED_OPT_NATT 0x00000008 #define IKED_OPT_PASSIVE 0x00000010 -#define IKED_OPT_NOIPV6BLOCKING 0x00000020 #define IKED_IKE_PORT 500 #define IKED_NATT_PORT 4500 |