kernel-netlink: add outer addresses to policy when using BEET mode

diff --git a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
index 58bce62476877632b1b6adb4c0b6f3d3e367ad7c..bfb8fa8891c224e7e27002066c472bfd7c5b4f7b 100644 (file)
--- a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
+++ b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
@@ -2055,7 +2055,7 @@ static status_t add_policy_internal(private_kernel_netlink_ipsec_t *this,
                                                         policy->direction != POLICY_OUT;
                        tmpl->family = ipsec->src->get_family(ipsec->src);
 
-                       if (proto_mode == MODE_TUNNEL)
+                       if (proto_mode == MODE_TUNNEL || proto_mode == MODE_BEET)
                        {       /* only for tunnel mode */
                                host2xfrm(ipsec->src, &tmpl->saddr);
                                host2xfrm(ipsec->dst, &tmpl->id.daddr);