git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3f9b766) | patch
xfrm: Accept ESP packets regardless of UDP encapsulation mode
authorMartin Willi <martin@strongswan.org>
Thu, 4 Dec 2008 23:40:17 +0000 (15:40 -0800)
committerDavid S. Miller <davem@davemloft.net>
Thu, 4 Dec 2008 23:40:17 +0000 (15:40 -0800)
commite061b165c7f4ec5e2e160d990b49011b5b6e5c6a
tree7108f6490557641531405d6e0d2ea7d22e58547ftree | snapshot
parent3f9b766ca7c4654d41f4f21357031c1c1e7de29ecommit | diff
xfrm: Accept ESP packets regardless of UDP encapsulation mode

From: Martin Willi <martin@strongswan.org>

An IPsec node speaking IKEv2 MUST accept incoming UDP encapsulated
ESP packets, even if no NAT situation is detected. This is important
if MOBIKE is in use. Some implementation keep the encapsulation
mode if they move out of a NAT situation.

Signed-off-by: David S. Miller <davem@davemloft.net>
net/xfrm/xfrm_input.c diff | blob | history
Full containers within linux kernel