New commits:
commit 246a5d98dbcfb88862c60e22467e15f72e6bf11a
Author: Andrew Cagney <[email protected]>
Date: Fri Mar 24 22:59:03 2023 -0400
routing: split RT_ROUTED_PROSPECTIVE into
RT_ROUTED_{NEVER_NEGOTIATE,ONDEMAND}
As hinted at by #1053 and #1047 the kernel policy installed by
"route" is either:
- never negotiate - hold, drop, reject - both inbound and outbound
- ondemand - trap - only outbound
This splits the routing states to reflect this (and solves another
mystery as to why code was unsure about the need to rip out
inbound kernel policies.
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
