Deleted Added
full compact
ip_ipsec.c (222845) ip_ipsec.c (230442)
1/*-
2 * Copyright (c) 1982, 1986, 1988, 1993
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright

--- 14 unchanged lines hidden (view full) ---

23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30#include <sys/cdefs.h>
1/*-
2 * Copyright (c) 1982, 1986, 1988, 1993
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright

--- 14 unchanged lines hidden (view full) ---

23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30#include <sys/cdefs.h>
31__FBSDID("$FreeBSD: head/sys/netinet/ip_ipsec.c 222845 2011-06-08 03:02:11Z bz $");
31__FBSDID("$FreeBSD: head/sys/netinet/ip_ipsec.c 230442 2012-01-22 02:13:19Z bz $");
32
33#include "opt_ipsec.h"
34#include "opt_sctp.h"
35
36#include <sys/param.h>
37#include <sys/systm.h>
38#include <sys/errno.h>
39#include <sys/kernel.h>

--- 47 unchanged lines hidden (view full) ---

87/*
88 * Check if we have to jump over firewall processing for this packet.
89 * Called from ip_input().
90 * 1 = jump over firewall, 0 = packet goes through firewall.
91 */
92int
93ip_ipsec_filtertunnel(struct mbuf *m)
94{
32
33#include "opt_ipsec.h"
34#include "opt_sctp.h"
35
36#include <sys/param.h>
37#include <sys/systm.h>
38#include <sys/errno.h>
39#include <sys/kernel.h>

--- 47 unchanged lines hidden (view full) ---

87/*
88 * Check if we have to jump over firewall processing for this packet.
89 * Called from ip_input().
90 * 1 = jump over firewall, 0 = packet goes through firewall.
91 */
92int
93ip_ipsec_filtertunnel(struct mbuf *m)
94{
95#if defined(IPSEC)
95#ifdef IPSEC
96
97 /*
98 * Bypass packet filtering for packets previously handled by IPsec.
99 */
100 if (!V_ip4_ipsec_filtertunnel &&
101 m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
102 return 1;
103#endif

--- 304 unchanged lines hidden ---
96
97 /*
98 * Bypass packet filtering for packets previously handled by IPsec.
99 */
100 if (!V_ip4_ipsec_filtertunnel &&
101 m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
102 return 1;
103#endif

--- 304 unchanged lines hidden ---