On Wed, Jun 27, 2007 at 08:02:51PM -0400, Sebastien Roy wrote:
> >ip/ip6.c 7041:                   * Return DONT_PROCESS because of potential 
> >Mobile IPv6
> 
> This is IPsec code, and since we've never had Mobile IPv6, I'm guessing 
> there's a good reason for this code to be here unrelated to our 
> implementation of Mobile IPv4.  danmcd, can you comment on this Mobile 
> IPv6 reference?

I sure can.

This function returns IPSEC_HDR_DONT_PROCESS when there is a destination
IPv6 options bag.  This is because you could get a situation like this:

        IP + destopts + routing-hdr <not-fully-transited> + AH + <data>

and that situation was often described as the "Mobile IPv6 situation" because
apparently there was some Mobile IPv6 destination option that would've been
conducive to the above situation.

Feel free to change the comment to remove Mobile IPv6 from it.  Hmmm... how
'bout this :

        /*
         * Return DONT_PROCESS because the destination options header may
         * be for each hop in a routing-header, and we only want AH if we're
         * finished with routing headers.
         */

That's more accurate AND it removes "Mobile IPv6" from the text.

Dan
_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to