src/sys/netinet/ip_input.c - diff

Return to ip_input.c CVS log

Up to [cvs.NetBSD.org] / src / sys / netinet

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

-version 1.127, 2001/01/24 09:04:15
+version 1.128, 2001/03/01 16:31:39
 Line 710  found:
 Line 710  found:
 Line 710  found:
                  IPQ_UNLOCK();
          }
+ #ifdef IPSEC
+         /*
+          * enforce IPsec policy checking if we are seeing last header.
+          * note that we do not visit this with protocols with pcb layer
+          * code - like udp/tcp/raw ip.
+          */
+         if ((inetsw[ip_protox[ip->ip_p]].pr_flags & PR_LASTHDR) != 0 &&
+             ipsec4_in_reject(m, NULL)) {
+                 ipsecstat.in_polvio++;
+                 goto bad;
+         }
+ #endif
          /*
           * Switch out to protocol's input routine.
           */