| commit | b05e106698d9966de524e78d9da1bf6407fe0c32 | [log] [tgz] |
|---|---|---|
| author | Patrick McHardy <kaber@trash.net> | Fri Jan 06 23:03:34 2006 -0800 |
| committer | David S. Miller <davem@sunset.davemloft.net> | Sat Jan 07 12:57:31 2006 -0800 |
| tree | 8a7c253b7249451941674805cccdaaba299dff6f | |
| parent | 951dbc8ac714b04c36296b8b5c36c8e036ce433f [diff] |
[IPV4/6]: Netfilter IPsec input hooks When the innermost transform uses transport mode the decapsulated packet is not visible to netfilter. Pass the packet through the PRE_ROUTING and LOCAL_IN hooks again before handing it to upper layer protocols to make netfilter-visibility symetrical to the output path. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>