Re: [PATCH ipsec] xfrm: fix dflt policy check when there is no policy configured
From: Antony Antony <hidden>
Date: 2021-11-25 07:09:13
Also in:
stable
Hi Nicolas, On Mon, Nov 22, 2021 at 11:33:13 +0100, Nicolas Dichtel wrote:
When there is no policy configured on the system, the default policy is checked in xfrm_route_forward. However, it was done with the wrong direction (XFRM_POLICY_FWD instead of XFRM_POLICY_OUT).
How can I reproduce this? I tried adding fwd block and no policy and that blocked the forwarded traffic. I ran into another issue with fwd block and and tunnel. I will double check. Next week.