diff options
| author | Martin Willi <martin@revosec.ch> | 2013-12-19 16:55:43 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-06-04 16:32:10 +0200 |
| commit | 1678f0a999bed5e486b56824381332a85c505033 (patch) | |
| tree | 86fd3778a77a8dd89fa61672263e1b38f510efa2 /src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c | |
| parent | 1ca2b1615ac633f2608c2a4e9107685ab083f42a (diff) | |
| download | strongswan-1678f0a999bed5e486b56824381332a85c505033.tar.bz2 strongswan-1678f0a999bed5e486b56824381332a85c505033.tar.xz | |
kernel-wfp: Manually create a ProviderContext to attach individual filters
This gives us more flexibility than using the intransparent FwpmIPsecTunnelAdd,
and fixes the issues we have seen with trap policies. Forward filters are
still missing, but required for site-to-site tunnels.
Diffstat (limited to 'src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c')
| -rw-r--r-- | src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c index 4296e147c..3660ac9d6 100644 --- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c +++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_compat.c @@ -54,6 +54,18 @@ const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V4 = { const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V6 = { 0x38d87722, 0xad83, 0x4f11, { 0xa9,0x1f,0xdf,0x0f,0xb0,0x77,0x22,0x5b } }; +const GUID FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V4 = { + 0x191a8a46, 0x0bf8, 0x46cf, { 0xb0,0x45,0x4b,0x45,0xdf,0xa6,0xa3,0x24 } +}; +const GUID FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V6 = { + 0x80c342e3, 0x1e53, 0x4d6f, { 0x9b,0x44,0x03,0xdf,0x5a,0xee,0xe1,0x54 } +}; +const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TUNNEL_V4 = { + 0x70a4196c, 0x835b, 0x4fb0, { 0x98,0xe8,0x07,0x5f,0x4d,0x97,0x7d,0x46 } +}; +const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TUNNEL_V6 = { + 0xf1835363, 0xa6a5, 0x4e62, { 0xb1,0x80,0x23,0xdb,0x78,0x9d,0x8d,0xa6 } +}; /** * Load a function symbol from a loaded dll |