From: Patrick McHardy Date: Fri, 13 Jan 2006 22:34:36 +0000 (-0800) Subject: [XFRM]: IPsec tunnel wildcard address support X-Git-Tag: v2.6.16-rc1~173^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ee51b1b6cece4dad408feeb0c3c9adb9cbd9f7d9;p=pandora-kernel.git [XFRM]: IPsec tunnel wildcard address support When the source address of a tunnel is given as 0.0.0.0 do a routing lookup to get the real source address for the destination and fill that into the acquire message. This allows to specify policies like this: spdadd 172.16.128.13/32 172.16.0.0/20 any -P out ipsec esp/tunnel/0.0.0.0-x.x.x.x/require; spdadd 172.16.0.0/20 172.16.128.13/32 any -P in ipsec esp/tunnel/x.x.x.x-0.0.0.0/require; Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller --- Reading git-diff-tree failed