add IPSEC_FILTERGIF suport for FAST_IPSEC
PR: kern/51922 Submitted by: Eric Masson <e-masson@kisoft-services.com> MFC after: 1 week
This commit is contained in:
parent
28935f2753
commit
1f76a5e218
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=117897
@ -430,6 +430,13 @@ ip_input(struct mbuf *m)
|
||||
if (ipsec_gethist(m, NULL))
|
||||
goto pass;
|
||||
#endif
|
||||
#if defined(FAST_IPSEC) && !defined(IPSEC_FILTERGIF)
|
||||
/*
|
||||
* Bypass packet filtering for packets from a tunnel (gif).
|
||||
*/
|
||||
if (m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
|
||||
goto pass;
|
||||
#endif
|
||||
|
||||
/*
|
||||
* IpHack's section.
|
||||
|
Loading…
Reference in New Issue
Block a user