]> git.ipfire.org Git - thirdparty/strongswan.git/commit
kernel-wfp: Manually create a ProviderContext to attach individual filters
authorMartin Willi <martin@revosec.ch>
Thu, 19 Dec 2013 15:55:43 +0000 (16:55 +0100)
committerMartin Willi <martin@revosec.ch>
Wed, 4 Jun 2014 14:32:10 +0000 (16:32 +0200)
commit1678f0a999bed5e486b56824381332a85c505033
tree86fd3778a77a8dd89fa61672263e1b38f510efa2
parent1ca2b1615ac633f2608c2a4e9107685ab083f42a
kernel-wfp: Manually create a ProviderContext to attach individual filters

This gives us more flexibility than using the intransparent FwpmIPsecTunnelAdd,
and fixes the issues we have seen with trap policies. Forward filters are
still missing, but required for site-to-site tunnels.
src/libcharon/plugins/kernel_wfp/ipsecdump.c
src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c
src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.h
src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c