Re: [PATCH v2] vti: use right inner_mode for inbound inter address family policy checks

2016-09-09 Thread Steffen Klassert
On Wed, Sep 07, 2016 at 08:40:38PM +0200, thomas.zeitlhofer+l...@ze-it.at wrote: > In case of inter address family tunneling (IPv6 over vti4 or IPv4 over > vti6), the inbound policy checks in vti_rcv_cb() and vti6_rcv_cb() are > using the wrong address family. As a result, all inbound inter address

Re: [PATCH v2] vti: use right inner_mode for inbound inter address family policy checks

2016-09-08 Thread David Miller
From: thomas.zeitlhofer+l...@ze-it.at Date: Wed, 7 Sep 2016 20:40:38 +0200 > In case of inter address family tunneling (IPv6 over vti4 or IPv4 over > vti6), the inbound policy checks in vti_rcv_cb() and vti6_rcv_cb() are > using the wrong address family. As a result, all inbound inter address > fa

[PATCH v2] vti: use right inner_mode for inbound inter address family policy checks

2016-09-07 Thread thomas . zeitlhofer+lkml
In case of inter address family tunneling (IPv6 over vti4 or IPv4 over vti6), the inbound policy checks in vti_rcv_cb() and vti6_rcv_cb() are using the wrong address family. As a result, all inbound inter address family traffic is dropped. Use the xfrm_ip2inner_mode() helper, as done in xfrm_input