• Masahide NAKAMURA's avatar
    [IPV6] IPSEC: Omit redirect for tunnelled packet. · 1e5dc146
    Masahide NAKAMURA authored
    IPv6 IPsec tunnel gateway incorrectly sends redirect to
    router or sender when network device the IPsec tunnelled packet
    is arrived is the same as the one the decapsulated packet
    is sent.
    
    With this patch, it omits to send the redirect when the forwarding
    skbuff carries secpath, since such skbuff should be assumed as
    a decapsulated packet from IPsec tunnel by own.
    
    It may be a rare case for an IPsec security gateway, however
    it is not rare when the gateway is MIPv6 Home Agent since
    the another tunnel end-point is Mobile Node and it changes
    the attached network.
    Signed-off-by: default avatarMasahide NAKAMURA <nakam@linux-ipv6.org>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    1e5dc146
ip6_output.c 36.4 KB