From 44b4f0d06f4e1585fe32ceb9c813b1bc1888c784 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 10 Aug 2010 15:09:13 +0200 Subject: [PATCH] pluto: Install IN policy of a shunt eroute with protocol. --- src/pluto/kernel.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/pluto/kernel.c b/src/pluto/kernel.c index 8b22bc24d..c7a9dd54d 100644 --- a/src/pluto/kernel.c +++ b/src/pluto/kernel.c @@ -1387,7 +1387,8 @@ static bool shunt_eroute(connection_t *c, struct spd_route *sr, ok = raw_eroute(&c->spd.that.host_addr, &c->spd.that.client, &c->spd.this.host_addr, &c->spd.this.client, htonl(spi), - SA_INT, SADB_X_SATYPE_INT, 0, &null_ipsec_sa, 0, + SA_INT, SADB_X_SATYPE_INT, sr->this.protocol, + &null_ipsec_sa, 0, op | (SADB_X_SAFLAGS_INFLOW << ERO_FLAG_SHIFT), opname); return eroute_connection(sr, htonl(spi), SA_INT, SADB_X_SATYPE_INT,