]> err.no Git - linux-2.6/commit
[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 12 Dec 2007 18:44:16 +0000 (10:44 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:22 +0000 (14:57 -0800)
commitd5422efe680fc55010c6ddca2370ca9548a96355
treef72fa5eb779c8ae7d49688a9caac9b69a1f3bd58
parent815f4e57e9fc67456624ecde0515a901368c78d2
[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse

RFC 4301 requires us to relookup ICMP traffic that does not match any
policies using the reverse of its payload.  This patch adds the functions
xfrm_decode_session_reverse and xfrmX_policy_check_reverse so we can get
the reverse flow to perform such a lookup.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/xfrm.h
include/net/xfrm.h
net/ipv4/xfrm4_policy.c
net/ipv6/xfrm6_policy.c
net/xfrm/xfrm_policy.c