matthias
/
iproute2
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
iproute2/ip
History
Pavel Šimerda 11a3e5c4b3 ip-xfrm: support 'proto any' with 'sport' and 'dport' 
When creating an IPsec SA that sets 'proto any' (IPPROTO_IP) and
specifies 'sport' and 'dport' at the same time in selector, the
following error is issued:

"sport" and "dport" are invalid with proto=ip

However using IPPROTO_IP with ports is completely legal and necessary
when one wants to share the SA on both TCP and UDP. One of the
applications requiring sharing SAs is 3GPP IMS AKA authentication.

See also:

 * https://bugzilla.redhat.com/show_bug.cgi?id=497355

Reported-by: Jiří Klimeš <jklimes@redhat.com>
Signed-off-by: Pavel Šimerda <psimerda@redhat.com>
 		2015-04-20 09:56:44 -07:00
..
.gitignore Another .gitignore file. 2006-08-08 12:11:23 -07:00
Makefile Revert "ip netns: Fix rtnl error while print netns list" 2015-04-13 08:50:10 -07:00
ifcfg Remove trailing whitespace 2006-12-05 10:10:22 -08:00
ip.c add basic mpls support to iproute 2015-03-24 15:45:23 -07:00
ip6tunnel.c iproute2: ip6_tunnel mode bugfixes: any,vti6 2014-11-02 11:48:43 -08:00
ip_common.h netns: Rename & move get_netns_fd to lib 2015-01-13 17:34:47 -08:00
ipaddress.c ip: enable configuring multicast group autojoin 2015-03-24 15:45:23 -07:00
ipaddrlabel.c ip: Make uniform the use of synonyms list, show and lst 2015-03-24 14:49:21 -07:00
ipfou.c ip fou: Support to configure foo-over-udp RX 2014-11-06 16:17:34 -08:00
ipl2tp.c iproute2: add l2spec_type param to l2tp add session 2013-03-27 13:20:58 -07:00
iplink.c ip-link: Align usage at [link-netns ID] line 2015-04-07 08:36:20 -07:00
iplink_bond.c add a source addres length parameter to rt_addr_n2a 2015-03-24 15:45:23 -07:00
iplink_bond_slave.c iproute2: allow to change slave options via type_slave 2014-09-28 16:05:24 -07:00
iplink_bridge.c add bridge master device support 2014-09-28 16:33:29 -07:00
iplink_bridge_slave.c add bridge_slave device support 2014-09-28 16:31:04 -07:00
iplink_can.c can: Add support for CAN FD non-ISO feature 2015-02-05 10:35:24 -08:00
iplink_hsr.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
iplink_ipoib.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
iplink_ipvlan.c ip link: Add ipvlan support to the iproute2/ip util 2014-12-03 09:37:37 -08:00
iplink_macvlan.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
iplink_macvtap.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
iplink_vlan.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
iplink_vxlan.c vxlan: Group policy extension 2015-02-05 10:31:43 -08:00
ipmaddr.c ipmaddr: add whitespace around = 2013-03-14 13:44:25 -07:00
ipmonitor.c add basic mpls support to iproute 2015-03-24 15:45:23 -07:00
ipmroute.c add a source addres length parameter to rt_addr_n2a 2015-03-24 15:45:23 -07:00
ipneigh.c neighbor: check return values 2015-01-13 18:07:23 -08:00
ipnetconf.c ip monitor: Allow to filter events by dev 2014-11-29 11:15:40 -08:00
ipnetns.c ipnetns: add a runtime check for RTM_GETNSID support 2015-04-13 08:50:10 -07:00
ipntable.c kill spaces before tabs 2014-02-17 10:56:31 -08:00
ipprefix.c add a source addres length parameter to rt_addr_n2a 2015-03-24 15:45:23 -07:00
iproute.c iproute2: unify naming for entries offloaded to hardware 2015-04-13 09:40:46 -07:00
iprule.c add a source addres length parameter to rt_addr_n2a 2015-03-24 15:45:23 -07:00
iptoken.c ip: Make uniform the use of synonyms list, show and lst 2015-03-24 14:49:21 -07:00
iptunnel.c misc whitespace cleanup 2015-03-24 15:45:23 -07:00
iptuntap.c ip tuntap: Added missing commands in usage 2014-09-28 16:19:31 -07:00
ipxfrm.c ip-xfrm: support 'proto any' with 'sport' and 'dport' 2015-04-20 09:56:44 -07:00
link_gre.c ip link: Add support for remote checksum offload to IP tunnels 2015-02-05 10:50:02 -08:00
link_gre6.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
link_ip6tnl.c add a source addres length parameter to rt_addr_n2a 2015-03-24 15:45:23 -07:00
link_iptnl.c ip link: Add support for remote checksum offload to IP tunnels 2015-02-05 10:50:02 -08:00
link_veth.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
link_vti.c ip link: Shortify printing the usage of link type 2014-10-09 08:29:47 -07:00
link_vti6.c iproute2: VTI6 support for ip -6 link command. 2014-09-28 16:23:12 -07:00
routef ip/routef lifesaver 2007-07-10 18:29:20 -07:00
routel (Logical change 1.3) 2004-04-15 20:56:59 +00:00
rtm_map.c (Logical change 1.3) 2004-04-15 20:56:59 +00:00
rtmon.c Add define for nlmsg_types with timestamp 2015-01-13 17:34:47 -08:00
rtpr (Logical change 1.3) 2004-04-15 20:56:59 +00:00
static-syms.c Fix build when shared libraries are disabled 2013-03-13 08:29:59 -07:00
tcp_metrics.c ip: support of usec rtt in tcp_metrics 2014-09-28 15:58:36 -07:00
tunnel.c tunnel: decode ESP tunnel type 2014-12-03 19:08:41 -08:00
tunnel.h Fix FSF address in file headers 2013-12-06 15:05:07 -08:00
xfrm.h Fix FSF address in file headers 2013-12-06 15:05:07 -08:00
xfrm_monitor.c xfrm: fix build with later kernel headers 2015-04-10 13:17:54 -07:00
xfrm_policy.c xfrm: add command for configuring SPD hash table 2015-04-10 13:21:27 -07:00
xfrm_state.c xfrm: add support of ESN and anti-replay window 2014-10-29 22:50:48 -07:00