From bb7ff6c29b8b5e8dd03d358c6d636f894cf0cf93 Mon Sep 17 00:00:00 2001
From: Markus Friedl <markus@cvs.openbsd.org>
Date: Tue, 3 Jul 2007 11:32:28 +0000
Subject: allow proto esp/ah in flow specification (especially useful for
 bypass flows) ok hshoexer, mpf

---
 sbin/ipsecctl/parse.y | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/sbin/ipsecctl/parse.y b/sbin/ipsecctl/parse.y
index 48344759d39..1100d8dfb7f 100644
--- a/sbin/ipsecctl/parse.y
+++ b/sbin/ipsecctl/parse.y
@@ -1,4 +1,4 @@
-/*	$OpenBSD: parse.y,v 1.123 2007/05/10 06:10:04 hshoexer Exp $	*/
+/*	$OpenBSD: parse.y,v 1.124 2007/07/03 11:32:27 markus Exp $	*/
 
 /*
  * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org>
@@ -372,6 +372,8 @@ proto		: /* empty */			{ $$ = 0; }
 			}
 
 		}
+		| PROTO ESP 			{ $$ = IPPROTO_ESP; }
+		| PROTO AH			{ $$ = IPPROTO_AH; }
 		;
 
 tmode		: /* empty */			{ $$ = IPSEC_TUNNEL; }
-- 
cgit v1.2.3