cvs commit: src/sys/netinet6 ip6_forward.c

[Hajimu UMEMOTO]

ume         2004/02/19 06:57:22 PST

  FreeBSD src repository

  Modified files:
    sys/netinet6         ip6_forward.c 
  Log:
  - call ip6_output() instead of nd6_output() when ipsec tunnel
    mode is applied, since tunneled packets are considered to be
    generated packets from a tunnel encapsulating node.
  - tunnel mode may not be applied if SA mode is ANY and policy
    does not say "tunnel it".  check if we have extra IPv6 header
    on the packet after ipsec6_output_tunnel() and call ip6_output()
    only if additional IPv6 header is added.
  - free the copyed packet before returning.
  
  Obtained from:  KAME
  
  Revision  Changes    Path
  1.25      +21 -3     src/sys/netinet6/ip6_forward.c