| version 1.133, 2011/11/19 22:51:29 |
version 1.134, 2011/12/19 11:59:58 |
| Line 112 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| Line 112 __KERNEL_RCSID(0, "$NetBSD$"); |
|
| #include <netinet6/in6_ifattach.h> |
#include <netinet6/in6_ifattach.h> |
| #include <netinet6/nd6.h> |
#include <netinet6/nd6.h> |
| |
|
| #ifdef IPSEC |
#ifdef KAME_IPSEC |
| #include <netinet6/ipsec.h> |
#include <netinet6/ipsec.h> |
| #include <netinet6/ipsec_private.h> |
#include <netinet6/ipsec_private.h> |
| #endif |
#endif |
| Line 279 ip6_input(struct mbuf *m) |
|
| Line 279 ip6_input(struct mbuf *m) |
|
| int s, error; |
int s, error; |
| #endif |
#endif |
| |
|
| #ifdef IPSEC |
#ifdef KAME_IPSEC |
| /* |
/* |
| * should the inner packet be considered authentic? |
* should the inner packet be considered authentic? |
| * see comment in ah4_input(). |
* see comment in ah4_input(). |
| Line 351 ip6_input(struct mbuf *m) |
|
| Line 351 ip6_input(struct mbuf *m) |
|
| goto bad; |
goto bad; |
| } |
} |
| |
|
| #if defined(IPSEC) |
#if defined(KAME_IPSEC) |
| /* IPv6 fast forwarding is not compatible with IPsec. */ |
/* IPv6 fast forwarding is not compatible with IPsec. */ |
| m->m_flags &= ~M_CANFASTFWD; |
m->m_flags &= ~M_CANFASTFWD; |
| #else |
#else |
| Line 374 ip6_input(struct mbuf *m) |
|
| Line 374 ip6_input(struct mbuf *m) |
|
| * let ipfilter look at packet on the wire, |
* let ipfilter look at packet on the wire, |
| * not the decapsulated packet. |
* not the decapsulated packet. |
| */ |
*/ |
| #ifdef IPSEC |
#ifdef KAME_IPSEC |
| if (!ipsec_getnhist(m)) |
if (!ipsec_getnhist(m)) |
| #elif defined(FAST_IPSEC) |
#elif defined(FAST_IPSEC) |
| if (!ipsec_indone(m)) |
if (!ipsec_indone(m)) |
| Line 785 ip6_input(struct mbuf *m) |
|
| Line 785 ip6_input(struct mbuf *m) |
|
| } |
} |
| } |
} |
| |
|
| #ifdef IPSEC |
#ifdef KAME_IPSEC |
| /* |
/* |
| * enforce IPsec policy checking if we are seeing last header. |
* enforce IPsec policy checking if we are seeing last header. |
| * note that we do not visit this with protocols with pcb layer |
* note that we do not visit this with protocols with pcb layer |