denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

install PASS and DROP shunt policies via PFKEYv2 interface

Browse Source
This commit is contained in:
Andreas Steffen
2011-07-05 21:57:45 +02:00
parent a7edbd219f
commit 06b5b61838
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+12 -1
View File
@@ -1649,7 +1649,18 @@ METHOD(kernel_ipsec_t, add_policy, status_t,
pol->sadb_x_policy_len = PFKEY_LEN(sizeof(struct sadb_x_policy));
pol->sadb_x_policy_id = 0;
pol->sadb_x_policy_dir = dir2kernel(direction);
pol->sadb_x_policy_type = IPSEC_POLICY_IPSEC;
switch (type)
{
case POLICY_IPSEC:
pol->sadb_x_policy_type = IPSEC_POLICY_IPSEC;
break;
case POLICY_PASS:
pol->sadb_x_policy_type = IPSEC_POLICY_NONE;
break;
case POLICY_DROP:
pol->sadb_x_policy_type = IPSEC_POLICY_DISCARD;
break;
}
#ifdef HAVE_STRUCT_SADB_X_POLICY_SADB_X_POLICY_PRIORITY
/* calculate priority based on selector size, small size = high prio */
pol->sadb_x_policy_priority = routed ? PRIO_LOW : PRIO_HIGH;