Tobias Brunner d7a59f1976 Install fallback drop policies to avoid transmitting unencrypted packets. ...

During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy
is first uninstalled and then the new one is installed.  In the short
time in between, where no policy is available in the kernel, unencrypted
packets could have been transmitted.

2011-07-27 13:44:33 +02:00

..

kernel_interface.c

Remove policies in kernel interfaces based on their priority.

2011-07-27 13:41:35 +02:00

kernel_interface.h

Remove policies in kernel interfaces based on their priority.

2011-07-27 13:41:35 +02:00

kernel_ipsec.c

implemented PASS and DROP shunt policies

2011-06-28 19:42:54 +02:00

kernel_ipsec.h

Install fallback drop policies to avoid transmitting unencrypted packets.

2011-07-27 13:44:33 +02:00

kernel_listener.h

Fixed common misspellings.

2011-07-20 16:14:10 +02:00

kernel_net.h

Moved kernel interface to libhydra.

2010-09-02 19:01:25 +02:00