commit b05e106698d9966de524e78d9da1bf6407fe0c32
author Patrick McHardy <kaber@trash.net> Fri Jan 06 23:03:34 2006 -0800
committer David S. Miller <davem@sunset.davemloft.net> Sat Jan 07 12:57:31 2006 -0800
tree 8a7c253b7249451941674805cccdaaba299dff6f
parent 951dbc8ac714b04c36296b8b5c36c8e036ce433f

[IPV4/6]: Netfilter IPsec input hooks

When the innermost transform uses transport mode the decapsulated packet
is not visible to netfilter. Pass the packet through the PRE_ROUTING and
LOCAL_IN hooks again before handing it to upper layer protocols to make
netfilter-visibility symetrical to the output path.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

include/net/ipv6.h

diff --git a/include/net/ipv6.h b/include/net/ipv6.h
index 860bbac..3b1d963 100644
--- a/include/net/ipv6.h
+++ b/include/net/ipv6.h
@@ -418,6 +418,8 @@
 					 struct packet_type *pt,
 					 struct net_device *orig_dev);
 
+extern int			ip6_rcv_finish(struct sk_buff *skb);
+
 /*
  *	upper-layer output functions
  */