| commit | 09ee9dba9611cd382fd360a99ad1c2fa23bfdca8 | [log] [tgz] |
|---|---|---|
| author | Tobias Brunner <tobias@strongswan.org> | Thu Dec 21 17:32:24 2017 +0100 |
| committer | David S. Miller <davem@davemloft.net> | Tue Dec 26 17:14:56 2017 -0500 |
| tree | 3c9b69538cebcb5945e61633378069e85b8d221b | |
| parent | 18feb87105c3c16dc01e6981a6aafb175679b997 [diff] |
ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT If SNAT modifies the source address the resulting packet might match an IPsec policy, reinject the packet if that's the case. The exact same thing is already done for IPv4. Signed-off-by: Tobias Brunner <tobias@strongswan.org> Acked-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: David S. Miller <davem@davemloft.net>