d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add IPSEC_FILTERGIF suport for FAST_IPSEC

Browse Source 
PR:		kern/51922
Submitted by:	Eric Masson <e-masson@kisoft-services.com>
MFC after:	1 week
This commit is contained in:
Sam Leffler 2003-07-22 18:58:34 +00:00
parent 28935f2753
commit 1f76a5e218
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=117897
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/netinet/ip_input.c
View File

@ -430,6 +430,13 @@ ip_input(struct mbuf *m)
if (ipsec_gethist(m, NULL))
goto pass;
#endif
#if defined(FAST_IPSEC) && !defined(IPSEC_FILTERGIF)
/*
* Bypass packet filtering for packets from a tunnel (gif).
*/
if (m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
goto pass;
#endif
/*
* IpHack's section.