Re: [PATCH 2/2] [IPSEC]: Add ICMP host relookup support

2007-12-11 Thread Herbert Xu
On Tue, Dec 11, 2007 at 09:10:56AM -0800, David Miller wrote: > > This enumeration doesn't exist in my tree, what are you generating > these patches against? Sorry, I forgot to include the first patch because I made it before the xfrm_lookup bug fix. Here's the complete set against net-2.6.25.

Re: [PATCH 2/2] [IPSEC]: Add ICMP host relookup support

2007-12-11 Thread David Miller
From: Herbert Xu <[EMAIL PROTECTED]> Date: Wed, 12 Dec 2007 00:55:02 +0800 > diff --git a/include/net/dst.h b/include/net/dst.h > index aaa2dbb..31468c9 100644 > --- a/include/net/dst.h > +++ b/include/net/dst.h > @@ -268,6 +268,7 @@ extern void dst_init(void); > /* Flags for xfrm_l

[PATCH 2/2] [IPSEC]: Add ICMP host relookup support

2007-12-11 Thread Herbert Xu
[IPSEC]: Add ICMP host relookup support RFC 4301 requires us to relookup ICMP traffic that does not match any policies using the reverse of its payload. This patch implements this for ICMP traffic that originates from or terminates on localhost. This is activated on outbound with the new policy