[src/trunk]: src/sys/netinet6 remove obsolete #if 0'ed section. sync w/kame

[itojun <itojun%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/e9add93b8b6b
branches:  trunk
changeset: 519600:e9add93b8b6b
user:      itojun <itojun%NetBSD.org@localhost>
date:      Fri Dec 21 07:16:58 2001 +0000

description:
remove obsolete #if 0'ed section.  sync w/kame

diffstat:

 sys/netinet6/ah_input.c |  20 ++------------------
 1 files changed, 2 insertions(+), 18 deletions(-)

diffs (48 lines):

diff -r 44a03a6c0caa -r e9add93b8b6b sys/netinet6/ah_input.c
--- a/sys/netinet6/ah_input.c   Fri Dec 21 07:02:23 2001 +0000
+++ b/sys/netinet6/ah_input.c   Fri Dec 21 07:16:58 2001 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: ah_input.c,v 1.29 2001/11/13 00:56:56 lukem Exp $      */
+/*     $NetBSD: ah_input.c,v 1.30 2001/12/21 07:16:58 itojun Exp $     */
 /*     $KAME: ah_input.c,v 1.64 2001/09/04 08:43:19 itojun Exp $       */
 
 /*
@@ -35,7 +35,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: ah_input.c,v 1.29 2001/11/13 00:56:56 lukem Exp $");
+__KERNEL_RCSID(0, "$NetBSD: ah_input.c,v 1.30 2001/12/21 07:16:58 itojun Exp $");
 
 #include "opt_inet.h"
 
@@ -426,14 +426,6 @@
                        goto fail;
                }
 
-#if 0 /* XXX should we call ipfw rather than ipsec_in_reject? */
-               /* drop it if it does not match the default policy */
-               if (ipsec4_in_reject(m, NULL)) {
-                       ipsecstat.in_polvio++;
-                       goto fail;
-               }
-#endif
-
 #if 1
                /*
                 * Should the inner packet be considered authentic?
@@ -905,14 +897,6 @@
                        goto fail;
                }
 
-#if 0 /* XXX should we call ipfw rather than ipsec_in_reject? */
-               /* drop it if it does not match the default policy */
-               if (ipsec6_in_reject(m, NULL)) {
-                       ipsec6stat.in_polvio++;
-                       goto fail;
-               }
-#endif
-
 #if 1
                /*
                 * should the inner packet be considered authentic?