git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 815f4e5) | patch
[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 12 Dec 2007 18:44:16 +0000 (10:44 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:22 +0000 (14:57 -0800)
commitd5422efe680fc55010c6ddca2370ca9548a96355
treef72fa5eb779c8ae7d49688a9caac9b69a1f3bd58tree | snapshot
parent815f4e57e9fc67456624ecde0515a901368c78d2commit | diff
[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse

RFC 4301 requires us to relookup ICMP traffic that does not match any
policies using the reverse of its payload.  This patch adds the functions
xfrm_decode_session_reverse and xfrmX_policy_check_reverse so we can get
the reverse flow to perform such a lookup.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/xfrm.h diff | blob | history
include/net/xfrm.h diff | blob | history
net/ipv4/xfrm4_policy.c diff | blob | history
net/ipv6/xfrm6_policy.c diff | blob | history
net/xfrm/xfrm_policy.c diff | blob | history
Full containers within linux kernel