upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-09 08:43:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Revert "netinet: err, fix checksumming for IPsec"

Browse source 
This reverts commit aa24757a1a.
Only cosmetic for tcpdump sessions on enc0. ae@ said to fix
this another way.
This commit is contained in:
Franco Fichtner 2018-03-31 11:09:25 +02:00
parent 529bbe68b3
commit 678f0874c2
1 changed files with 2 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
sys/netinet/ip_input.c
View file

@ -1022,21 +1022,9 @@ ip_forward(struct mbuf *m, int srcrt)
m_copydata(m, 0, mcopy->m_len, mtod(mcopy, caddr_t));
}
#ifdef IPSTEALTH
if (V_ipstealth == 0) {
#endif
/*
* Decrement the TTL and incrementally change the IP header checksum.
* Don't bother doing this with hw checksum offloading, it's faster
* doing it right here.
*/
ip->ip_ttl -= IPTTLDEC;
if (ip->ip_sum >= (u_int16_t) ~htons(IPTTLDEC << 8))
ip->ip_sum -= ~htons(IPTTLDEC << 8);
else
ip->ip_sum += htons(IPTTLDEC << 8);
#ifdef IPSTEALTH
}
if (V_ipstealth == 0)
#endif
ip->ip_ttl -= IPTTLDEC;
#if defined(IPSEC) || defined(IPSEC_SUPPORT)
if (IPSEC_ENABLED(ipv4)) {
if ((error = IPSEC_FORWARD(ipv4, m)) != 0) {