linux/net/xfrm
Herbert Xu 8b7817f3a9 [IPSEC]: Add ICMP host relookup support
RFC 4301 requires us to relookup ICMP traffic that does not match any
policies using the reverse of its payload.  This patch implements this
for ICMP traffic that originates from or terminates on localhost.

This is activated on outbound with the new policy flag XFRM_POLICY_ICMP,
and on inbound by the new state flag XFRM_STATE_ICMP.

On inbound the policy check is now performed by the ICMP protocol so
that it can repeat the policy check where necessary.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-01-28 14:57:23 -08:00
..
Kconfig [PFKEYV2]: CONFIG_NET_KEY_MIGRATE option 2007-02-08 13:15:05 -08:00
Makefile [IPSEC]: Move common output code to xfrm_output 2007-10-10 16:54:53 -07:00
xfrm_algo.c cleanup asm/scatterlist.h includes 2007-11-02 08:47:06 +01:00
xfrm_hash.c [IPSEC]: kmalloc + memset conversion to kzalloc 2008-01-28 14:55:05 -08:00
xfrm_hash.h [XFRM] STATE: Use destination address for src hash. 2006-10-04 00:31:02 -07:00
xfrm_input.c [IPSEC]: Add xfrm_input_state helper 2008-01-28 14:57:05 -08:00
xfrm_output.c [IPSEC]: Kill afinfo->nf_post_routing 2008-01-28 14:53:55 -08:00
xfrm_policy.c [IPSEC]: Add ICMP host relookup support 2008-01-28 14:57:23 -08:00
xfrm_state.c [XFRM] net/xfrm/xfrm_state.c: use LIST_HEAD instead of LIST_HEAD_INIT 2008-01-28 14:56:54 -08:00
xfrm_user.c [IPSEC]: Make x->lastused an unsigned long 2008-01-28 14:53:52 -08:00