CVS commit: src/sys

[Steve Woodford <scw%netbsd.org@localhost>]

Module Name:    src
Committed By:   scw
Date:           Mon Nov 24 20:54:59 UTC 2003

Modified Files:
        src/sys/netinet: ip_input.c
        src/sys/netipsec: ipsec.h

Log Message:
For FAST_IPSEC, ipfilter gets to see wire-format IPsec-encapsulated packets
only. Decapsulated packets bypass ipfilter. This mimics current behaviour
for Kame IPsec.


To generate a diff of this commit:
cvs rdiff -r1.185 -r1.186 src/sys/netinet/ip_input.c
cvs rdiff -r1.3 -r1.4 src/sys/netipsec/ipsec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.