diff options
| author | remi <remi@cvs.openbsd.org> | 2018-03-15 21:01:19 +0000 |
|---|---|---|
| committer | remi <remi@cvs.openbsd.org> | 2018-03-15 21:01:19 +0000 |
| commit | a5bcd2dc9e06cf5f7b16560d642cce2bd9ebc037 (patch) | |
| tree | c5764fe87f3c645a72ffe101ab46777ed2e135ea /sys | |
| parent | 9263df5d939ee890b5ed7de1eea17d6eb2facf17 (diff) | |
Remove the check for flags M_AUTH and M_CONF (AH and ESP).
The check prevents incomming multicast packages from arriving at the gif
interface (eg. OSPF) when the traffic is protected by IPsec in transport
mode.
ok dlg@
Diffstat (limited to 'sys')
| -rw-r--r-- | sys/net/if_gif.c | 6 |
1 files changed, 1 insertions, 5 deletions
diff --git a/sys/net/if_gif.c b/sys/net/if_gif.c index d73e7de6760..78c77efd206 100644 --- a/sys/net/if_gif.c +++ b/sys/net/if_gif.c @@ -1,4 +1,4 @@ -/* $OpenBSD: if_gif.c,v 1.112 2018/02/28 23:28:05 dlg Exp $ */ +/* $OpenBSD: if_gif.c,v 1.113 2018/03/15 21:01:18 remi Exp $ */ /* $KAME: if_gif.c,v 1.43 2001/02/20 08:51:07 itojun Exp $ */ /* @@ -744,10 +744,6 @@ gif_input(struct gif_tunnel *key, struct mbuf **mp, int *offp, int proto, return (-1); } - /* XXX What if we run transport-mode IPsec to protect gif tunnel ? */ - if (m->m_flags & (M_AUTH | M_CONF)) - return (-1); - key->t_rtableid = m->m_pkthdr.ph_rtableid; sc = gif_find(key); |