denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

child-sa: Enable ICMP forwarding on SA and policies if configured

Browse Source
This commit is contained in:
Tobias Brunner
2026-02-12 14:23:44 +01:00
parent 110fbcbe65
commit b6114e84fc
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/child_sa.c
+3
View File
@@ -1121,6 +1121,7 @@ static status_t install_internal(private_child_sa_t *this, chunk_t encr,
.copy_ecn = !this->config->has_option(this->config, OPT_NO_COPY_ECN), .copy_ecn = !this->config->has_option(this->config, OPT_NO_COPY_ECN),
.copy_dscp = this->config->get_copy_dscp(this->config), .copy_dscp = this->config->get_copy_dscp(this->config),
.iptfs_dont_frag = this->iptfs_dont_frag, .iptfs_dont_frag = this->iptfs_dont_frag,
.forward_icmp = this->config->has_option(this->config, OPT_FORWARD_ICMP),
.label = label_for(this, LABEL_USE_SA), .label = label_for(this, LABEL_USE_SA),
.initiator = initiator, .initiator = initiator,
.inbound = inbound, .inbound = inbound,
@@ -1295,6 +1296,7 @@ static status_t install_policies_outbound(private_child_sa_t *this,
.src = my_addr, .src = my_addr,
.dst = other_addr, .dst = other_addr,
.pcpu_acquires = this->per_cpu, .pcpu_acquires = this->per_cpu,
.forward_icmp = this->config->has_option(this->config, OPT_FORWARD_ICMP),
.sa = other_sa, .sa = other_sa,
}; };
uint32_t reqid = other_sa->reqid; uint32_t reqid = other_sa->reqid;
@@ -1409,6 +1411,7 @@ static void del_policies_outbound(private_child_sa_t *this,
.src = my_addr, .src = my_addr,
.dst = other_addr, .dst = other_addr,
.pcpu_acquires = this->per_cpu, .pcpu_acquires = this->per_cpu,
.forward_icmp = this->config->has_option(this->config, OPT_FORWARD_ICMP),
.sa = other_sa, .sa = other_sa,
}; };
uint32_t reqid = other_sa->reqid; uint32_t reqid = other_sa->reqid;