1/*- 2 * Copyright (c) 1982, 1986, 1988, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright --- 14 unchanged lines hidden (view full) --- 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 */ 29 30#include <sys/cdefs.h> |
31__FBSDID("$FreeBSD: head/sys/netinet/ip_ipsec.c 230442 2012-01-22 02:13:19Z bz $"); |
32 33#include "opt_ipsec.h" 34#include "opt_sctp.h" 35 36#include <sys/param.h> 37#include <sys/systm.h> 38#include <sys/errno.h> 39#include <sys/kernel.h> --- 47 unchanged lines hidden (view full) --- 87/* 88 * Check if we have to jump over firewall processing for this packet. 89 * Called from ip_input(). 90 * 1 = jump over firewall, 0 = packet goes through firewall. 91 */ 92int 93ip_ipsec_filtertunnel(struct mbuf *m) 94{ |
95#ifdef IPSEC |
96 97 /* 98 * Bypass packet filtering for packets previously handled by IPsec. 99 */ 100 if (!V_ip4_ipsec_filtertunnel && 101 m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL) 102 return 1; 103#endif --- 304 unchanged lines hidden --- |