kernel-netlink: Implement passthrough type routes and use them on Linux

[thirdparty/strongswan.git] / src / libcharon / plugins / kernel_wfp / kernel_wfp_ipsec.c

diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
index db684b0600c3549c9b929cddf806c5f7b89c065a..19d4f3ef4c9ed22e7808c2ade87520528d23e2a5 100644 (file)
--- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
+++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
@@ -1402,7 +1402,8 @@ static bool uninstall_route(private_kernel_wfp_ipsec_t *this,
                        if (charon->kernel->get_interface(charon->kernel, src, &name))
                        {
                                res = charon->kernel->del_route(charon->kernel,
-                                               dst->get_address(dst), mask, gtw, src, name) == SUCCESS;
+                                                                               dst->get_address(dst), mask, gtw, src,
+                                                                               name, FALSE) == SUCCESS;
                                free(name);
                        }
                        route = this->routes->remove(this->routes, route);
@@ -1446,8 +1447,8 @@ static bool install_route(private_kernel_wfp_ipsec_t *this,
        {
                if (charon->kernel->get_interface(charon->kernel, src, &name))
                {
-                       if (charon->kernel->add_route(charon->kernel,
-                                               dst->get_address(dst), mask, gtw, src, name) == SUCCESS)
+                       if (charon->kernel->add_route(charon->kernel, dst->get_address(dst),
+                                                                               mask, gtw, src, name, FALSE) == SUCCESS)
                        {
                                INIT(route,
                                        .dst = dst->clone(dst),