[src/netbsd-1-5]: src/sys/netinet6 Pull up revision 1.59 (requested by itojun):

[he <he%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/f2d80ca9fe03
branches:  netbsd-1-5
changeset: 490822:f2d80ca9fe03
user:      he <he%NetBSD.org@localhost>
date:      Sun Mar 11 21:11:58 2001 +0000

description:
Pull up revision 1.59 (requested by itojun):
  Ensure that we enforce inbound IPsec policy on all IP protocols,
  not just TCP, UDP and ICMP.

diffstat:

 sys/netinet6/icmp6.c |  10 +---------
 1 files changed, 1 insertions(+), 9 deletions(-)

diffs (24 lines):

diff -r c819429029a1 -r f2d80ca9fe03 sys/netinet6/icmp6.c
--- a/sys/netinet6/icmp6.c      Sun Mar 11 21:11:21 2001 +0000
+++ b/sys/netinet6/icmp6.c      Sun Mar 11 21:11:58 2001 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: icmp6.c,v 1.33.2.7 2001/02/03 18:35:14 he Exp $        */
+/*     $NetBSD: icmp6.c,v 1.33.2.8 2001/03/11 21:11:58 he Exp $        */
 /*     $KAME: icmp6.c,v 1.146 2000/10/01 12:37:20 itojun Exp $ */
 
 /*
@@ -355,14 +355,6 @@
        }
 #endif
 
-#ifdef IPSEC
-       /* drop it if it does not match the default policy */
-       if (ipsec6_in_reject(m, NULL)) {
-               ipsec6stat.in_polvio++;
-               goto freeit;
-       }
-#endif
-
        icmp6stat.icp6s_inhist[icmp6->icmp6_type]++;
        icmp6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_msg);
        if (icmp6->icmp6_type < ICMP6_INFOMSG_MASK)