6d1198e71d
The kernel implicitly creates an IPIP SA if an IPComp SA is installed. This SA is used inbound for small packets that are not compressed. Since the addresses are different (they are the tunnel addresses not those of the tunneled traffic) additional rules are required if the traffic selector does not cover the tunnel addresses (e.g. due to a NAT). For SAs with multiple traffic selectors duplicate rules will get installed. |
||
---|---|---|
.. | ||
.gitignore | ||
Makefile.am | ||
_updown.8 | ||
_updown.in |