summaryrefslogtreecommitdiff
path: root/sys/netinet6/ipcomp_input.c
diff options
context:
space:
mode:
authormanu <manu@NetBSD.org>2005-05-20 01:25:17 +0000
committermanu <manu@NetBSD.org>2005-05-20 01:25:17 +0000
commit7c6ffb8ab4d42678ff3104d00a5b73448d78a1ee (patch)
treee83695f0502236ac0024f1de09fa80b748fae4a3 /sys/netinet6/ipcomp_input.c
parent47d12f36e751828ecf1dd323ee151fec8329dde1 (diff)
Use NAT-T ports for AH and IPcomp too.
Diffstat (limited to 'sys/netinet6/ipcomp_input.c')
-rw-r--r--sys/netinet6/ipcomp_input.c18
1 files changed, 15 insertions, 3 deletions
diff --git a/sys/netinet6/ipcomp_input.c b/sys/netinet6/ipcomp_input.c
index dbd2315cceb..d88f32738d9 100644
--- a/sys/netinet6/ipcomp_input.c
+++ b/sys/netinet6/ipcomp_input.c
@@ -1,4 +1,4 @@
-/* $NetBSD: ipcomp_input.c,v 1.24 2005/04/29 10:39:09 yamt Exp $ */
+/* $NetBSD: ipcomp_input.c,v 1.25 2005/05/20 01:25:17 manu Exp $ */
/* $KAME: ipcomp_input.c,v 1.29 2001/09/04 08:43:19 itojun Exp $ */
/*
@@ -35,7 +35,7 @@
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: ipcomp_input.c,v 1.24 2005/04/29 10:39:09 yamt Exp $");
+__KERNEL_RCSID(0, "$NetBSD: ipcomp_input.c,v 1.25 2005/05/20 01:25:17 manu Exp $");
#include "opt_inet.h"
@@ -103,6 +103,11 @@ ipcomp4_input(m, va_alist)
struct secasvar *sav = NULL;
int off, proto;
va_list ap;
+ u_int16_t sport = 0;
+ u_int16_t dport = 0;
+#ifdef IPSEC_NAT_T
+ struct m_tag *tag = NULL;
+#endif
va_start(ap, m);
off = va_arg(ap, int);
@@ -115,6 +120,13 @@ ipcomp4_input(m, va_alist)
ipsecstat.in_inval++;
goto fail;
}
+#ifdef IPSEC_NAT_T
+ /* find the source port for NAT-T */
+ if ((tag = m_tag_find(m, PACKET_TAG_IPSEC_NAT_T_PORTS, NULL)) != NULL) {
+ sport = ((u_int16_t *)(tag + 1))[0];
+ dport = ((u_int16_t *)(tag + 1))[1];
+ }
+#endif
md = m_pulldown(m, off, sizeof(*ipcomp), NULL);
if (!md) {
@@ -138,7 +150,7 @@ ipcomp4_input(m, va_alist)
if (cpi >= IPCOMP_CPI_NEGOTIATE_MIN) {
sav = key_allocsa(AF_INET, (caddr_t)&ip->ip_src,
(caddr_t)&ip->ip_dst, IPPROTO_IPCOMP, htonl(cpi),
- 0, 0);
+ sport, dport);
if (sav != NULL &&
(sav->state == SADB_SASTATE_MATURE ||
sav->state == SADB_SASTATE_DYING)) {