diff options
| author | Hans-Joerg Hoexer <hshoexer@cvs.openbsd.org> | 2005-07-07 22:00:37 +0000 |
|---|---|---|
| committer | Hans-Joerg Hoexer <hshoexer@cvs.openbsd.org> | 2005-07-07 22:00:37 +0000 |
| commit | 6fb2eddb8f3f64886c1e5af28d9ce141f683c154 (patch) | |
| tree | f251452209b87dc406d29a528256120d6dfd9f1b /sbin/ipsecctl/parse.y | |
| parent | cc14e57b56cc8938c5a3aad6319c89aaa6593336 (diff) | |
set flow type (use, require, etc.) when a rule is created. Up to now this was
done while crafting the corresponding pfkey message.
Diffstat (limited to 'sbin/ipsecctl/parse.y')
| -rw-r--r-- | sbin/ipsecctl/parse.y | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/sbin/ipsecctl/parse.y b/sbin/ipsecctl/parse.y index 339e46a2f22..a4fc1b1b7fc 100644 --- a/sbin/ipsecctl/parse.y +++ b/sbin/ipsecctl/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.5 2005/07/07 21:00:08 hshoexer Exp $ */ +/* $OpenBSD: parse.y,v 1.6 2005/07/07 22:00:36 hshoexer Exp $ */ /* * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org> @@ -659,12 +659,17 @@ create_rule(u_int8_t dir, struct ipsec_addr *src, struct ipsec_addr *dst, if (r == NULL) err(1, "calloc"); + r->type = RULE_FLOW; + if (dir == IPSEC_INOUT) r->direction = IPSEC_OUT; else r->direction = dir; - r->type = RULE_FLOW; + if (r->direction == IPSEC_IN) + r->flowtype = TYPE_USE; + else + r->flowtype = TYPE_REQUIRE; r->src = src; r->dst = dst; @@ -720,10 +725,13 @@ reverse_rule(struct ipsec_rule *rule) reverse->type = RULE_FLOW; - if (rule->direction == (u_int8_t)IPSEC_OUT) + if (rule->direction == (u_int8_t)IPSEC_OUT) { reverse->direction = (u_int8_t)IPSEC_IN; - else + reverse->flowtype = TYPE_USE; + } else { reverse->direction = (u_int8_t)IPSEC_OUT; + reverse->flowtype = TYPE_REQUIRE; + } reverse->src = copyhost(rule->dst); reverse->dst = copyhost(rule->src); |