From f87991704e517ee433ee87e9dd37bf758268f71d Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 28 Jun 2011 19:42:54 +0200 Subject: implemented PASS and DROP shunt policies --- src/libhydra/kernel/kernel_ipsec.h | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/libhydra/kernel/kernel_ipsec.h') diff --git a/src/libhydra/kernel/kernel_ipsec.h b/src/libhydra/kernel/kernel_ipsec.h index ef36efd11..e7b62ad1f 100644 --- a/src/libhydra/kernel/kernel_ipsec.h +++ b/src/libhydra/kernel/kernel_ipsec.h @@ -47,6 +47,10 @@ enum ipsec_mode_t { MODE_TUNNEL, /** BEET mode, tunnel mode but fixed, bound inner addresses */ MODE_BEET, + /** passthrough policy for traffic without an IPsec SA */ + MODE_PASS, + /** drop policy discarding traffic */ + MODE_DROP }; /** -- cgit v1.2.3