From bca71775d200d95d2b2691fcb46c9a1b6715c08d Mon Sep 17 00:00:00 2001 From: mikeb Date: Mon, 12 Jan 2015 11:24:58 +0000 Subject: [PATCH] Don't forget about protocol specification when configuring flows. Tested by and OK claudio. --- sbin/iked/parse.y | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/sbin/iked/parse.y b/sbin/iked/parse.y index 6a2c570518d..a79234191a8 100644 --- a/sbin/iked/parse.y +++ b/sbin/iked/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.42 2014/11/20 05:51:20 jsg Exp $ */ +/* $OpenBSD: parse.y,v 1.43 2015/01/12 11:24:58 mikeb Exp $ */ /* * Copyright (c) 2010-2013 Reyk Floeter @@ -2623,6 +2623,8 @@ create_ike(char *name, int af, u_int8_t ipproto, struct ipsec_hosts *hosts, flows[j].flow_dst.addr_net = ipb->netaddress; flows[j].flow_dst.addr_port = hosts->dport; + flows[j].flow_ipproto = ipproto; + pol.pol_nflows++; RB_INSERT(iked_flows, &pol.pol_flows, &flows[j]); } -- 2.20.1