strongswan/src/_updown
Tobias Brunner 6d1198e71d updown: Allow IPIP traffic if IPComp was negotiated
The kernel implicitly creates an IPIP SA if an IPComp SA is installed.
This SA is used inbound for small packets that are not compressed.

Since the addresses are different (they are the tunnel addresses not
those of the tunneled traffic) additional rules are required if the
traffic selector does not cover the tunnel addresses (e.g. due to a NAT).

For SAs with multiple traffic selectors duplicate rules will get installed.
2014-01-23 10:27:12 +01:00
..
.gitignore added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00
Makefile.am Use the GEN silent rule when generating files with sed 2013-05-06 15:04:56 +02:00
_updown.8 removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
_updown.in updown: Allow IPIP traffic if IPComp was negotiated 2014-01-23 10:27:12 +01:00