Re: iked: load explicit flows for ipip/ipcomp

2017-11-08 Thread Markus Friedl
ok On Sun, Nov 05, 2017 at 10:39:18PM +0100, Patrick Wildt wrote: > Hi, > > for IPcomp we need to load explicit ESP-flows for the IPIP or IPCOMP > tunneled packets, otherwise every packet between the gateways will > be sent into the tunnel (e.g. ICMP, too). > > ok? > > Patrick > > diff --git a

iked: load explicit flows for ipip/ipcomp

2017-11-05 Thread Patrick Wildt
Hi, for IPcomp we need to load explicit ESP-flows for the IPIP or IPCOMP tunneled packets, otherwise every packet between the gateways will be sent into the tunnel (e.g. ICMP, too). ok? Patrick diff --git a/sbin/iked/ikev2.c b/sbin/iked/ikev2.c index 706f9ebbe1d..cacfe690008 100644 --- a/sbin/i