denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Log IP addresses for discarded inbound IPsec packets

Browse Source
This commit is contained in:
Tobias Brunner
2012-10-16 14:16:17 +02:00
parent 45885ca613
commit 488b1cad13
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libipsec/ipsec_processor.c
+3 -1
View File
@@ -146,7 +146,9 @@ static job_requeue_t process_inbound(private_ipsec_processor_t *this)
policy->destroy(policy); policy->destroy(policy);
break; break;
} }
DBG1(DBG_ESP, "discarding inbound IP packet due to policy"); DBG1(DBG_ESP, "discarding inbound IP packet %H == %H due to "
"policy", ip_packet->get_source(ip_packet),
ip_packet->get_destination(ip_packet));
/* no matching policy found, fall-through */ /* no matching policy found, fall-through */
} }
case IPPROTO_NONE: case IPPROTO_NONE: