Patrick McHardy b05e106698 [IPV4/6]: Netfilter IPsec input hooks ...

When the innermost transform uses transport mode the decapsulated packet
is not visible to netfilter. Pass the packet through the PRE_ROUTING and
LOCAL_IN hooks again before handing it to upper layer protocols to make
netfilter-visibility symetrical to the output path.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-07 12:57:31 -08:00

3.5 KiB

Raw Blame History

View Raw