]> git.ipfire.org Git - thirdparty/strongswan.git/commit
kernel-utun: install a bypass route along with an SA to its destination kernel-utun
authorMartin Willi <martin@revosec.ch>
Wed, 17 Apr 2013 14:49:35 +0000 (16:49 +0200)
committerMartin Willi <martin@revosec.ch>
Thu, 18 Apr 2013 12:43:56 +0000 (14:43 +0200)
commit8d7b15861705295080907d7d875dc4ef66614b45
tree70134e508ff70dd13440514da57d0363cf38d49f
parentcc3af6ae60b24b52d6f873094df3016230fd9f6a
kernel-utun: install a bypass route along with an SA to its destination

If the tunneled subnet includes the IKE peer (default route), we have to avoid
that our IKE and ESP packets use the route (and source address) over the utun.
src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c