From aaefeafb4943689c3882b3a434a484cc85c4c10e Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 16 Aug 2012 15:26:37 +0200 Subject: Enable UDP decapsulation for both address families Since the 3.5 Linux kernel both UDP implementations have a separate static flag to indicate whether ANY sockets enabled UDP decapsulation. As we only ever enabled it for one address family (in earlier versions IPv4 only, now for IPv6, if supported, and for IPv4 otherwise) UDP decapsulation wouldn't work anymore (at least for one address family). --- src/libcharon/plugins/socket_raw/socket_raw_socket.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/libcharon/plugins/socket_raw/socket_raw_socket.c') diff --git a/src/libcharon/plugins/socket_raw/socket_raw_socket.c b/src/libcharon/plugins/socket_raw/socket_raw_socket.c index 1b3c9e126..e6d1e4d2f 100644 --- a/src/libcharon/plugins/socket_raw/socket_raw_socket.c +++ b/src/libcharon/plugins/socket_raw/socket_raw_socket.c @@ -459,8 +459,8 @@ static int open_send_socket(private_socket_raw_socket_t *this, DBG1(DBG_NET, "installing bypass policy on send socket failed"); } - /* enable UDP decapsulation globally, only for one socket needed */ - if (family == AF_INET && port == CHARON_NATT_PORT && + /* enable UDP decapsulation for NAT-T sockets */ + if (port == CHARON_NATT_PORT && !hydra->kernel_interface->enable_udp_decap(hydra->kernel_interface, skt, family, port)) { -- cgit v1.2.3