Re: system/3023

From: Markus Friedl <markus(at)cvs.openbsd.org>
Date: Wed Jun 11 2003 - 04:18:53 EDT

Synopsis: packet handling is inconsistent when using a gif-tunnel inside an IPsec tunnel

State-Changed-From-To: open->analyzed
State-Changed-By: markus
State-Changed-When: Wed Jun 11 02:16:05 MDT 2003
State-Changed-Why: 

in_gif_input() calls ip4_input() for ipsec protected packets tcpdump only sees packets passed to ipip_input() see

        /* XXX what if we run transport-mode IPsec to protect gif tunnel ? */
        if (m->m_flags & (M_AUTH | M_CONF))
                goto inject;

in in_gif_input() Received on Wed Jun 11 04:28:51 2003