From: Michael Rossberg <michael.rossberg@tu-ilmenau.de>
Date: Wed, 22 May 2013 07:55:46 +0000 (+0200)
Subject: kernel-netlink: add outer addresses to policy when using BEET mode
X-Git-Tag: 5.1.0dr1~137
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e4d5e0114f2b0de1ddd600e2e2e66fc87d6120ec;p=thirdparty%2Fstrongswan.git

kernel-netlink: add outer addresses to policy when using BEET mode
---

diff --git a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
index 58bce62476..bfb8fa8891 100644
--- a/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
+++ b/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
@@ -2055,7 +2055,7 @@ static status_t add_policy_internal(private_kernel_netlink_ipsec_t *this,
 							 policy->direction != POLICY_OUT;
 			tmpl->family = ipsec->src->get_family(ipsec->src);
 
-			if (proto_mode == MODE_TUNNEL)
+			if (proto_mode == MODE_TUNNEL || proto_mode == MODE_BEET)
 			{	/* only for tunnel mode */
 				host2xfrm(ipsec->src, &tmpl->saddr);
 				host2xfrm(ipsec->dst, &tmpl->id.daddr);