CVSROOT: /cvs
Module name: src
Changes by: mar...@cvs.openbsd.org 2012/03/15 10:37:11
Modified files:
sys/netinet : ip_ecn.c ip_ecn.h ip_ipip.c
Log message:
improve IPsec/ENC interaction:
- ipip_input() recalculate the IP header checksum if the tos bits
are changed after decapsulation. Otherwise these packets are
dropped later in the stack.
- ip_ecn_egress(): do not drop packets for IPsec if the outter
packet of a Tunnel has the ECN-CE bit set (Congestion Experienced)
and the inner packet does not indicate support ECN.
- remove unused ip6_ecn_ingress(), ip6_ecn_egress() code
ok mikeb@
