Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

disable ipflow (IPv4 fast fowarding) when IPsec is configured into the kernel.

This commit is contained in:
itojun 1999-10-26 09:53:17 +00:00
parent c9c2181ed9
commit 90fe937b44
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/netinet/ip_input.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: ip_input.c,v 1.93 1999/10/17 16:00:00 sommerfeld Exp $ */
/* $NetBSD: ip_input.c,v 1.94 1999/10/26 09:53:17 itojun Exp $ */
/*
* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@ -443,11 +443,16 @@ ip_input(struct mbuf *m)
m_adj(m, len - m->m_pkthdr.len);
}
#ifdef IPSEC
/* ipflow (IP fast fowarding) is not compatible with IPsec. */
m->m_flags &= ~M_CANFASTFWD;
#else
/*
* Assume that we can create a fast-forward IP flow entry
* based on this packet.
*/
m->m_flags |= M_CANFASTFWD;
#endif
#ifdef PFIL_HOOKS
/*