]> git.ipfire.org Git - thirdparty/strongswan.git/commit
child-sa: Add an option to install outbound trap policies only trap-policies-out-only
authorTobias Brunner <tobias@strongswan.org>
Fri, 21 Aug 2015 15:25:00 +0000 (17:25 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 21 Aug 2015 15:25:00 +0000 (17:25 +0200)
commit5b47a47153e0e1beb6f1ae94b50faad7de1c8244
tree2fb7a32689a7231a6a75a6d7e9239cb17ef64ebb
parent105365eabe7408eeac6227766e34c5ebc25ae618
child-sa: Add an option to install outbound trap policies only

When enabled this prevents the installation of IN/FWD policies for
auto=route connections. So unencrypted/unauthenticated inbound traffic
won't be blocked but it might be useful in some scenarios.

 #1065.
conf/options/charon.opt
src/libcharon/sa/child_sa.c