[Bug 296598] inbound ipsec packets get tracked via outer ip header when the tunnel runs over if_wg

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296598

--- Comment #14 from Lars Krämer <lkr@wizard.de> ---
(In reply to Andrey V. Elsukov from comment #13)
It's a bit of a question of who's supposed to be responsible for handling these
edgecases. As of 15.x, it seems like pf is also doing a m_pullup before trying
to read from the mbuf. That would lead me to believe this isn't ipsec's
responsibility.
The patch was more of a proof of concept, to show that this is actually what is
happening, not really meant to be pulled as is.
The only open question in my mind is if this justifies a patch for 14.x.
While the way I encountered it is a little esoteric, there's clearly a bug
here.

-- 
You are receiving this mail because:
You are the assignee for the bug.