don't update outgoing ifp, if ipsec tunnel mode encapsulation
was not made. Obtained from: KAME
This commit is contained in:
parent
06a72d12d1
commit
70dbc6cbfc
@ -569,7 +569,6 @@ ip_output(struct mbuf *m, struct mbuf *opt, struct route *ro,
|
||||
}
|
||||
goto bad;
|
||||
}
|
||||
}
|
||||
|
||||
/* be sure to update variables that are affected by ipsec4_output() */
|
||||
ip = mtod(m, struct ip *);
|
||||
@ -582,9 +581,12 @@ ip_output(struct mbuf *m, struct mbuf *opt, struct route *ro,
|
||||
goto bad;
|
||||
}
|
||||
} else {
|
||||
ia = ifatoia(ro->ro_rt->rt_ifa);
|
||||
ifp = ro->ro_rt->rt_ifp;
|
||||
if (state.encap) {
|
||||
ia = ifatoia(ro->ro_rt->rt_ifa);
|
||||
ifp = ro->ro_rt->rt_ifp;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/* make it flipped, again. */
|
||||
ip->ip_len = ntohs(ip->ip_len);
|
||||
|
Loading…
Reference in New Issue
Block a user