diff options
| author | Patrick McHardy <kaber@trash.net> | 2006-01-07 02:03:34 -0500 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-01-07 15:57:31 -0500 |
| commit | b05e106698d9966de524e78d9da1bf6407fe0c32 (patch) | |
| tree | 8a7c253b7249451941674805cccdaaba299dff6f /net/ipv6/ip6_input.c | |
| parent | 951dbc8ac714b04c36296b8b5c36c8e036ce433f (diff) | |
[IPV4/6]: Netfilter IPsec input hooks
When the innermost transform uses transport mode the decapsulated packet
is not visible to netfilter. Pass the packet through the PRE_ROUTING and
LOCAL_IN hooks again before handing it to upper layer protocols to make
netfilter-visibility symetrical to the output path.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/ip6_input.c')
| -rw-r--r-- | net/ipv6/ip6_input.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv6/ip6_input.c b/net/ipv6/ip6_input.c index 13d724150f33..29f73592e68e 100644 --- a/net/ipv6/ip6_input.c +++ b/net/ipv6/ip6_input.c | |||
| @@ -48,7 +48,7 @@ | |||
| 48 | 48 | ||
| 49 | 49 | ||
| 50 | 50 | ||
| 51 | static inline int ip6_rcv_finish( struct sk_buff *skb) | 51 | inline int ip6_rcv_finish( struct sk_buff *skb) |
| 52 | { | 52 | { |
| 53 | if (skb->dst == NULL) | 53 | if (skb->dst == NULL) |
| 54 | ip6_route_input(skb); | 54 | ip6_route_input(skb); |