diff options
| author |   markus <markus@openbsd.org> | 2004-04-18 16:41:40 +0000 |
|---|---|---|
| committer | markus <markus@openbsd.org> | 2004-04-18 16:41:40 +0000 |
| commit | e331b712a182167f944e7902c7481a4e47e6ed23 (patch) | |
| tree | e7aca533dc370b5a51cf2d250772717e170af761 /sys/netinet/ipsec_input.c | |
| parent | spelling error by henning who cannot commit from near kamloops; openbsd@rukh.net (diff) | |
| download | wireguard-openbsd-e331b712a182167f944e7902c7481a4e47e6ed23.tar.xz wireguard-openbsd-e331b712a182167f944e7902c7481a4e47e6ed23.zip | |
pass esp/ah/ipcmp to rawip if processing is disabled with sysctl;
allows userland ipsec; tested by sturm@; ok deraadt@, ho@, hshoexer@
Diffstat (limited to 'sys/netinet/ipsec_input.c')
| -rw-r--r-- | sys/netinet/ipsec_input.c | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/sys/netinet/ipsec_input.c b/sys/netinet/ipsec_input.c index 44ed27eedb1..e2b1538ea08 100644 --- a/sys/netinet/ipsec_input.c +++ b/sys/netinet/ipsec_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ipsec_input.c,v 1.71 2004/02/17 12:07:45 markus Exp $ */ +/* $OpenBSD: ipsec_input.c,v 1.72 2004/04/18 16:41:40 markus Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), * Angelos D. Keromytis (kermit@csd.uch.gr) and @@ -129,10 +129,8 @@ ipsec_common_input(struct mbuf *m, int skip, int protoff, int af, int sproto, if ((sproto == IPPROTO_ESP && !esp_enable) || (sproto == IPPROTO_AH && !ah_enable) || (sproto == IPPROTO_IPCOMP && !ipcomp_enable)) { - m_freem(m); - IPSEC_ISTAT(espstat.esps_pdrops, ahstat.ahs_pdrops, - ipcompstat.ipcomps_pdrops); - return EOPNOTSUPP; + rip_input(m, skip, sproto); + return 0; } if (m->m_pkthdr.len - skip < 2 * sizeof(u_int32_t)) { |