Martin Willi 902dc29f7a child-sa: Use SA matching mark as SA set mark if the latter is %same ...

For inbound processing, it can be rather useful to apply the mark to the
packet in the SA, so the associated policy with that mark implicitly matches.
When using %unique as match mark, we don't know the mark beforehand, so
we most likely want to set the mark we match against.

2018-08-31 12:26:40 +02:00

..

ipsec_types.c

child-sa: Use SA matching mark as SA set mark if the latter is %same

2018-08-31 12:26:40 +02:00

ipsec_types.h

child-sa: Use SA matching mark as SA set mark if the latter is %same

2018-08-31 12:26:40 +02:00