diff options
| author |   Matthew Smith <mgsmith@netgate.com> | 2018-05-15 22:03:05 -0500 |
|---|---|---|
| committer |   Damjan Marion <dmarion.lists@gmail.com> | 2018-05-16 20:07:37 +0000 |
| commit | 831fd64ae62b31149431beb07b9836df13be59f6 (patch) | |
| tree | 9b466511c4ad9cad8def4302cdbff18a9ee59acf /src/plugins/nat/extras/nat_out2in_10ks.py | |
| parent | d81ae41825f6d276ec778caa2e77a28f66f0ad28 (diff) | |
Drop IPsec packets when interface is down
Packets arriving on an IPsec tunnel interface
are decrypted and forwarded even if the
interface is down.
Check interface flags. If the interface is down,
cause packet to be dropped and increment the
counters for drops.
Change-Id: I94456bda3bd8eade0f3f522ad7cc341251174e6e
Signed-off-by: Matthew Smith <mgsmith@netgate.com>
Diffstat (limited to 'src/plugins/nat/extras/nat_out2in_10ks.py')
0 files changed, 0 insertions, 0 deletions