From 5e6e214ab41000b3eb89ab08b1bc09364ea39408 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Tue, 24 Dec 2013 10:40:09 +0100
Subject: kernel-iph: Implicitly enable IP forwarding when installing routes

---
 src/libcharon/plugins/kernel_iph/kernel_iph_net.c | 26 +++++++++++++++++++++++
 1 file changed, 26 insertions(+)

(limited to 'src/libcharon/plugins/kernel_iph/kernel_iph_net.c')

diff --git a/src/libcharon/plugins/kernel_iph/kernel_iph_net.c b/src/libcharon/plugins/kernel_iph/kernel_iph_net.c
index 71c595ba7..68b753792 100644
--- a/src/libcharon/plugins/kernel_iph/kernel_iph_net.c
+++ b/src/libcharon/plugins/kernel_iph/kernel_iph_net.c
@@ -50,6 +50,11 @@ struct private_kernel_iph_net_t {
 	 */
 	HANDLE changes;
 
+	/**
+	 * EnableRouter() OVERLAPPED
+	 */
+	OVERLAPPED router;
+
 	/**
 	 * Mutex to access interface list
 	 */
@@ -677,6 +682,23 @@ static status_t manage_route(private_kernel_iph_net_t *this, bool add,
 		DBG1(DBG_KNL, "%sing route failed: 0x%08lx", add ? "add" : "remov", ret);
 		return FAILED;
 	}
+
+	if (add)
+	{
+		ret = EnableRouter(NULL, &this->router);
+		if (ret != ERROR_IO_PENDING)
+		{
+			DBG1(DBG_KNL, "EnableRouter router failed: 0x%08lx", ret);
+		}
+	}
+	else
+	{
+		ret = UnenableRouter(&this->router, NULL);
+		if (ret != NO_ERROR)
+		{
+			DBG1(DBG_KNL, "UnenableRouter router failed: 0x%08lx", ret);
+		}
+	}
 	return SUCCESS;
 }
 
@@ -701,6 +723,7 @@ METHOD(kernel_net_t, destroy, void,
 	{
 		CancelMibChangeNotify2(this->changes);
 	}
+	CloseHandle(this->router.hEvent);
 	this->mutex->destroy(this->mutex);
 	this->ifaces->destroy_function(this->ifaces, (void*)iface_destroy);
 	free(this);
@@ -728,6 +751,9 @@ kernel_iph_net_t *kernel_iph_net_create()
 				.destroy = _destroy,
 			},
 		},
+		.router = {
+			.hEvent = CreateEvent(NULL, FALSE, FALSE, NULL),
+		},
 		.mutex = mutex_create(MUTEX_TYPE_DEFAULT),
 		.ifaces = linked_list_create(),
 	);
-- 
cgit v1.2.3