diff options
| author | manu <manu@NetBSD.org> | 2005-05-20 01:25:17 +0000 |
|---|---|---|
| committer | manu <manu@NetBSD.org> | 2005-05-20 01:25:17 +0000 |
| commit | 7c6ffb8ab4d42678ff3104d00a5b73448d78a1ee (patch) | |
| tree | e83695f0502236ac0024f1de09fa80b748fae4a3 /sys/netinet6/ipcomp_input.c | |
| parent | 47d12f36e751828ecf1dd323ee151fec8329dde1 (diff) | |
Use NAT-T ports for AH and IPcomp too.
Diffstat (limited to 'sys/netinet6/ipcomp_input.c')
| -rw-r--r-- | sys/netinet6/ipcomp_input.c | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/sys/netinet6/ipcomp_input.c b/sys/netinet6/ipcomp_input.c index dbd2315cceb..d88f32738d9 100644 --- a/sys/netinet6/ipcomp_input.c +++ b/sys/netinet6/ipcomp_input.c @@ -1,4 +1,4 @@ -/* $NetBSD: ipcomp_input.c,v 1.24 2005/04/29 10:39:09 yamt Exp $ */ +/* $NetBSD: ipcomp_input.c,v 1.25 2005/05/20 01:25:17 manu Exp $ */ /* $KAME: ipcomp_input.c,v 1.29 2001/09/04 08:43:19 itojun Exp $ */ /* @@ -35,7 +35,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: ipcomp_input.c,v 1.24 2005/04/29 10:39:09 yamt Exp $"); +__KERNEL_RCSID(0, "$NetBSD: ipcomp_input.c,v 1.25 2005/05/20 01:25:17 manu Exp $"); #include "opt_inet.h" @@ -103,6 +103,11 @@ ipcomp4_input(m, va_alist) struct secasvar *sav = NULL; int off, proto; va_list ap; + u_int16_t sport = 0; + u_int16_t dport = 0; +#ifdef IPSEC_NAT_T + struct m_tag *tag = NULL; +#endif va_start(ap, m); off = va_arg(ap, int); @@ -115,6 +120,13 @@ ipcomp4_input(m, va_alist) ipsecstat.in_inval++; goto fail; } +#ifdef IPSEC_NAT_T + /* find the source port for NAT-T */ + if ((tag = m_tag_find(m, PACKET_TAG_IPSEC_NAT_T_PORTS, NULL)) != NULL) { + sport = ((u_int16_t *)(tag + 1))[0]; + dport = ((u_int16_t *)(tag + 1))[1]; + } +#endif md = m_pulldown(m, off, sizeof(*ipcomp), NULL); if (!md) { @@ -138,7 +150,7 @@ ipcomp4_input(m, va_alist) if (cpi >= IPCOMP_CPI_NEGOTIATE_MIN) { sav = key_allocsa(AF_INET, (caddr_t)&ip->ip_src, (caddr_t)&ip->ip_dst, IPPROTO_IPCOMP, htonl(cpi), - 0, 0); + sport, dport); if (sav != NULL && (sav->state == SADB_SASTATE_MATURE || sav->state == SADB_SASTATE_DYING)) { |
