Module Name: src
Committed By: maxv
Date: Thu Mar 15 08:15:21 UTC 2018
Modified Files:
src/sys/netinet: in_proto.c
src/sys/netinet6: in6_proto.c
Log Message:
Add the PR_LASTHDR flag on the PFsync and CARP entries. Otherwise a
"require" IPsec policy is not enforced on them, and unauthenticated
packets will be accepted.
Tested with a require-AH configuration. Sent on tech-net@, no comment.
To generate a diff of this commit:
cvs rdiff -u -r1.126 -r1.127 src/sys/netinet/in_proto.c
cvs rdiff -u -r1.121 -r1.122 src/sys/netinet6/in6_proto.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
