kernel-wfp: Install tunnel mode policies to appropriate sub-layers
While it is unclear if this has any effect at all, we prefer specific sublayers to install policies as suggested.
This commit is contained in:
@@ -127,6 +127,8 @@ const GUID FWPM_LAYER_OUTBOUND_TRANSPORT_V4;
|
||||
const GUID FWPM_LAYER_OUTBOUND_TRANSPORT_V6;
|
||||
const GUID FWPM_LAYER_IPFORWARD_V4;
|
||||
const GUID FWPM_LAYER_IPFORWARD_V6;
|
||||
const GUID FWPM_SUBLAYER_IPSEC_TUNNEL;
|
||||
const GUID FWPM_SUBLAYER_IPSEC_FORWARD_OUTBOUND_TUNNEL;
|
||||
const GUID FWPM_CALLOUT_IPSEC_INBOUND_TRANSPORT_V4;
|
||||
const GUID FWPM_CALLOUT_IPSEC_INBOUND_TRANSPORT_V6;
|
||||
const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V4;
|
||||
|
||||
Reference in New Issue
Block a user