diff options
| author |   jjbg <jjbg@openbsd.org> | 2001-07-06 19:35:38 +0000 |
|---|---|---|
| committer | jjbg <jjbg@openbsd.org> | 2001-07-06 19:35:38 +0000 |
| commit | ce699b7a344ef06a0b50a0b1465a1f8304f96187 (patch) | |
| tree | 9352301857a9b7a61fc8424761798fe98c1df001 /sys/netinet/ipsec_input.c | |
| parent | remove the bugs section, that was because of 40bit wep, not vendor issue (diff) | |
| download | wireguard-openbsd-ce699b7a344ef06a0b50a0b1465a1f8304f96187.tar.xz wireguard-openbsd-ce699b7a344ef06a0b50a0b1465a1f8304f96187.zip | |
Don't use enc0 interface for IPComp. angelos@ ok.
Diffstat (limited to 'sys/netinet/ipsec_input.c')
| -rw-r--r-- | sys/netinet/ipsec_input.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/sys/netinet/ipsec_input.c b/sys/netinet/ipsec_input.c index 5cb26b282bd..17b8e0cec25 100644 --- a/sys/netinet/ipsec_input.c +++ b/sys/netinet/ipsec_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ipsec_input.c,v 1.49 2001/07/05 16:45:55 jjbg Exp $ */ +/* $OpenBSD: ipsec_input.c,v 1.50 2001/07/06 19:35:38 jjbg Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), * Angelos D. Keromytis (kermit@csd.uch.gr) and @@ -218,7 +218,8 @@ ipsec_common_input(struct mbuf *m, int skip, int protoff, int af, int sproto) return ENXIO; } - if (tdbp->tdb_dst.sa.sa_family == AF_INET) { + if (tdbp->tdb_dst.sa.sa_family == AF_INET && + sproto != IPPROTO_IPCOMP) { /* * XXX The fragment conflicts with scoped nature of * IPv6, so do it for only for IPv4 for now. |