kern/185876: ipfw not matching incoming packets decapsulating ipsec. example l2tp/ipsec

Georgios Amanakis gamanakis at gmail.com
Tue Feb 25 21:01:51 UTC 2014


The following patch resolves it (it has to be tested thoroughly).

Index: netipsec/xform_ipip.c
===================================================================
--- netipsec/xform_ipip.c       (revision 262492)
+++ netipsec/xform_ipip.c       (working copy)
@@ -181,6 +181,7 @@
        IPIPSTAT_INC(ipips_ipackets);

        m_copydata(m, 0, 1, &v);
+       m_clrprotoflags(m);

        switch (v >> 4) {
 #ifdef INET


More information about the freebsd-bugs mailing list