CVSROOT: /cvs Module name: src Changes by: [email protected] 2017/05/11 06:14:43
Modified files:
sys/netinet : ipsec_input.c
Log message:
IPv6 IPsec transport mode did not work if pf is enabled. The
decrypted packets in the input path were not checked with pf. So
with stateful filtering on enc0, direction aware protocols like
ping or TCP did not pass. Add an explicit pf_test() in
ipsec_common_input_cb() for IPv6 transport mode to fix this.
OK mikeb@
