aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/sa/shunt_manager.c
Commit message (Collapse)AuthorAgeFilesLines
* kernel-interface: Pass the same data to del_policy() that was passed to ↵Tobias Brunner2015-11-101-11/+16
| | | | | | | add_policy() The additional data can be helpful to identify the exact policy to delete.
* shunt-manager: Resolve %dynamic to %any4/6 before installing policiesTobias Brunner2015-09-161-7/+22
| | | | | | | | left|rightsubnet default to %dynamic, which is basically 0.0.0.0/0 until an address is assigned to it. So if only one side was undefined and the other traffic selector was IPv6 an address family mismatch would occur. References #595.
* shunt-manager: Don't install policies in case of an address family or IP ↵Tobias Brunner2015-09-161-0/+20
| | | | | | protocol mismatch References #595.
* shunt-manager: Add flush() method to properly uninstall shuntsTobias Brunner2015-07-271-4/+40
| | | | | This will allow us to uninstall shunts before unloading the kernel-interface plugins.
* shunt-manager: Remove stored entries if installation failsTobias Brunner2015-07-271-2/+11
|
* shunt-manager: Add a lock to safely access the list of shunt policiesTobias Brunner2015-07-271-3/+17
|
* shunt-manager: Install passthrough policies with highest priorityTobias Brunner2014-06-191-9/+34
| | | | | | This avoids conflicts with regular IPsec policies. Similarly, use the lowest priority for drop policies.
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
|
* Release leaking child config after uninstalling shunt policyMartin Willi2012-07-231-0/+1
|
* Remove policies in kernel interfaces based on their priority.Tobias Brunner2011-07-271-6/+9
| | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities.
* shunt manager installs policies with %any hostsAndreas Steffen2011-07-141-3/+6
|
* Adapted shunt manager to changed kernel interface (reqid in del_policy).Tobias Brunner2011-07-061-3/+6
|
* implemented PASS and DROP shunt policiesAndreas Steffen2011-06-281-0/+242