On 1 September 2016 at 10:31, Vincent Gross <vgr...@openbsd.org> wrote: > Our IPSec stack rejects UDP-encapsulated traffic using a non > encapsulating SA, but not the other way around. This diff adds > the missing check and the corresponding stat counter. > > Ok ? >
Go for it. OK mikeb