denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Install v6 routes via outgoing interface for now

Browse Source
This commit is contained in:
Martin Willi
2009-12-14 14:44:24 +01:00
parent 25df6196df
commit fc85786921
1 changed files with 7 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+6 -17
View File
@@ -1706,24 +1706,13 @@ static status_t add_policy(private_kernel_netlink_ipsec_t *this,
if (charon->kernel_interface->get_address_by_ts(charon->kernel_interface, if (charon->kernel_interface->get_address_by_ts(charon->kernel_interface,
dst_ts, &route->src_ip) == SUCCESS) dst_ts, &route->src_ip) == SUCCESS)
{ {
if (policy->sel.family == AF_INET) /* get the nexthop to src (src as we are in POLICY_FWD).*/
{ route->gateway = charon->kernel_interface->get_nexthop(
/* get the nexthop to src (src as we are in POLICY_FWD).*/ charon->kernel_interface, src);
route->gateway = charon->kernel_interface->get_nexthop( /* install route via outgoing interface */
charon->kernel_interface, src); route->if_name = charon->kernel_interface->get_interface(
/* for IPv4, the route is installed on the outgoing interface */
route->if_name = charon->kernel_interface->get_interface(
charon->kernel_interface, dst); charon->kernel_interface, dst);
route->dst_net = chunk_alloc(4); route->dst_net = chunk_alloc(policy->sel.family == AF_INET ? 4 : 16);
}
else
{
route->gateway = NULL;
/* for IPv6, it is on the interface with our source address */
route->if_name = charon->kernel_interface->get_interface(
charon->kernel_interface, route->src_ip);
route->dst_net = chunk_alloc(16);
}
memcpy(route->dst_net.ptr, &policy->sel.saddr, route->dst_net.len); memcpy(route->dst_net.ptr, &policy->sel.saddr, route->dst_net.len);
route->prefixlen = policy->sel.prefixlen_s; route->prefixlen = policy->sel.prefixlen_s;