davidlt/kernel-ark
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
38b0e42aba
kernel-ark/net/ipv6
History
Patrick McHardy ee51b1b6ce [XFRM]: IPsec tunnel wildcard address support 
When the source address of a tunnel is given as 0.0.0.0 do a routing lookup
to get the real source address for the destination and fill that into the
acquire message. This allows to specify policies like this:

spdadd 172.16.128.13/32 172.16.0.0/20 any -P out ipsec
        esp/tunnel/0.0.0.0-x.x.x.x/require;
spdadd 172.16.0.0/20 172.16.128.13/32 any -P in ipsec
        esp/tunnel/x.x.x.x-0.0.0.0/require;

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-01-13 14:34:36 -08:00
..
netfilter [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
addrconf.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
af_inet6.c [PATCH] capable/capability.h (net/) 2006-01-11 18:42:14 -08:00
ah6.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
anycast.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
datagram.c [PATCH] capable/capability.h (net/) 2006-01-11 18:42:14 -08:00
esp6.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
exthdrs_core.c [SELINUX]: Fix ipv6_skip_exthdr() invocation causing OOPS. 2005-04-24 20:16:19 -07:00
exthdrs.c [IPV6]: Move nextheader offset to the IP6CB 2006-01-07 12:57:29 -08:00
icmp.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
inet6_connection_sock.c [IPV6]: small cleanups 2006-01-07 13:24:25 -08:00
inet6_hashtables.c [INET6]: Generalise tcp_v6_hash_connect 2006-01-03 13:10:56 -08:00
ip6_fib.c [IPV6]: Put addr_diff() into common header for future use. 2005-11-08 09:37:56 -08:00
ip6_flowlabel.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
ip6_input.c [IPV4/6]: Netfilter IPsec input hooks 2006-01-07 12:57:31 -08:00
ip6_output.c [IPV6]: Set skb->priority in ip6_output.c 2006-01-09 14:16:31 -08:00
ip6_tunnel.c [PATCH] capable/capability.h (net/) 2006-01-11 18:42:14 -08:00
ipcomp6.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
ipv6_sockglue.c [PATCH] capable/capability.h (net/) 2006-01-11 18:42:14 -08:00
ipv6_syms.c [IPV6]: Make ipv6_addr_type() more generic so that we can use it for source address selection. 2005-11-08 09:38:12 -08:00
Kconfig [NET]: Make ipip/ip6_tunnel independant of XFRM 2005-07-19 14:03:34 -07:00
Makefile [IPV6]: Fix modular build with netfilter enabled. 2006-01-10 21:02:21 -08:00
mcast.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
ndisc.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00
netfilter.c [IPV6]: Fix modular build with netfilter enabled. 2006-01-10 21:02:21 -08:00
proc.c [NET]: Wider use of for_each_*cpu() 2005-10-25 23:54:01 -02:00
protocol.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
raw.c [IP]: Simplify and consolidate MSG_PEEK error handling 2006-01-03 13:10:41 -08:00
reassembly.c [IPV6]: Move nextheader offset to the IP6CB 2006-01-07 12:57:29 -08:00
route.c [PATCH] capable/capability.h (net/) 2006-01-11 18:42:14 -08:00
sit.c [PATCH] capable/capability.h (net/) 2006-01-11 18:42:14 -08:00
sysctl_net_ipv6.c [NET]: Fix sparse warnings 2005-08-29 16:01:32 -07:00
tcp_ipv6.c [IPV6]: Avoid calling ip6_xmit() with NULL sk 2006-01-11 16:32:13 -08:00
udp.c [IPV6]: Move nextheader offset to the IP6CB 2006-01-07 12:57:29 -08:00
xfrm6_input.c [IPV4/6]: Netfilter IPsec input hooks 2006-01-07 12:57:31 -08:00
xfrm6_output.c [NETFILTER]: Fix xfrm lookup in ip_route_me_harder/ip6_route_me_harder 2006-01-07 12:57:33 -08:00
xfrm6_policy.c [XFRM]: Handle DCCP in xfrm{4,6}_decode_session 2005-12-19 14:03:46 -08:00
xfrm6_state.c [XFRM]: IPsec tunnel wildcard address support 2006-01-13 14:34:36 -08:00
xfrm6_tunnel.c [NET]: Use NIP6_FMT in kernel.h 2006-01-13 14:29:07 -08:00