aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_router.h
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2013-08-13 17:10:00 +0200
committerTobias Brunner <tobias@strongswan.org>2013-10-11 15:32:44 +0200
commiteeb34af06936a7de2c66fd2149d9fb55a7ddb6b1 (patch)
tree2a3b4f94dfe701cee0b08a03b0b61564dc729701 /src/libcharon/plugins/kernel_libipsec/kernel_libipsec_router.h
parent80f8b3a6d86bb15b2dca73ad50371a54cb3e5cad (diff)
downloadstrongswan-eeb34af06936a7de2c66fd2149d9fb55a7ddb6b1.tar.bz2
strongswan-eeb34af06936a7de2c66fd2149d9fb55a7ddb6b1.tar.xz
kernel-libipsec: Add an option to allow remote TS to match the IKE peer
Setting the fwmark options for the kernel-netlink and socket-default plugins allow this kind of setup. It is probably required to set net.ipv4.conf.all.rp_filter to 2 to make it work.
Diffstat (limited to 'src/libcharon/plugins/kernel_libipsec/kernel_libipsec_router.h')
0 files changed, 0 insertions, 0 deletions