diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2006-05-28 02:04:16 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2006-05-28 02:04:16 +0000 |
| commit | 1c0c7dd860780ae17bd8ea82bff30b6c35a586e0 (patch) | |
| tree | a6a15178260c3fdd0a0571f0b4b6ccfd01f2d257 /sys/netinet/ip_esp.c | |
| parent | 7e12d8bf8633f87688e8a0c2941545054434766c (diff) | |
Only preemptively increase the replay counter for outbound TDBs.
Another ipsec failover fix from nathanael at polymorpheus dot com.
ok hshoexer@
Diffstat (limited to 'sys/netinet/ip_esp.c')
| -rw-r--r-- | sys/netinet/ip_esp.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/netinet/ip_esp.c b/sys/netinet/ip_esp.c index 40643e1ffb4..02558d2744d 100644 --- a/sys/netinet/ip_esp.c +++ b/sys/netinet/ip_esp.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ip_esp.c,v 1.97 2006/03/25 22:41:48 djm Exp $ */ +/* $OpenBSD: ip_esp.c,v 1.98 2006/05/28 02:04:15 mcbride Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), * Angelos D. Keromytis (kermit@csd.uch.gr) and @@ -588,7 +588,7 @@ esp_input_cb(void *op) tdb->tdb_wnd, &(tdb->tdb_bitmap), 1)) { case 0: /* All's well */ #if NPFSYNC > 0 - pfsync_update_tdb(tdb); + pfsync_update_tdb(tdb,0); #endif break; @@ -884,7 +884,7 @@ esp_output(struct mbuf *m, struct tdb *tdb, struct mbuf **mp, int skip, bcopy((caddr_t) &replay, mtod(mo, caddr_t) + sizeof(u_int32_t), sizeof(u_int32_t)); #if NPFSYNC > 0 - pfsync_update_tdb(tdb); + pfsync_update_tdb(tdb,1); #endif } |