Revision 00bb13bdf2757dc8dbe8b92ae1c29bd7d0fad668 authored by Paul Chaignon on 07 June 2023, 15:37:53 UTC, committed by Sebastian Wicki on 13 June 2023, 19:22:04 UTC
[ upstream commit d0ab559441311dbe0908834a86d633aa9eeb6a84 ]
We use this wildcard IPv6 CIDR in the catch-all default-drop OUT policy
as well as in the FWD policy. It was incorrectly set to ::/128 instead
of ::/0 and would therefore not match anything instead of matching
everything. This commit fixes it.
Fixes: e802c2985 ("ipsec: Refactor wildcard IP variables")
Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
Signed-off-by: Sebastian Wicki <sebastian@isovalent.com>
1 parent 3a5aa36
| File | Mode | Size |
|---|---|---|
| complexity-tests | ||
| custom | ||
| include | ||
| lib | ||
| mock | ||
| sockops | ||
| tests | ||
| .gitignore | -rw-r--r-- | 154 bytes |
| COPYING | -rw-r--r-- | 17.6 KB |
| Makefile | -rw-r--r-- | 18.1 KB |
| Makefile.bpf | -rw-r--r-- | 3.0 KB |
| bpf_alignchecker.c | -rw-r--r-- | 3.0 KB |
| bpf_features.h | -rw-r--r-- | 333 bytes |
| bpf_host.c | -rw-r--r-- | 35.2 KB |
| bpf_lxc.c | -rw-r--r-- | 55.2 KB |
| bpf_network.c | -rw-r--r-- | 1.9 KB |
| bpf_overlay.c | -rw-r--r-- | 12.3 KB |
| bpf_sock.c | -rw-r--r-- | 29.6 KB |
| bpf_xdp.c | -rw-r--r-- | 6.7 KB |
| cilium-probe-kernel-hz.c | -rw-r--r-- | 3.9 KB |
| ep_config.h | -rw-r--r-- | 1.5 KB |
| filter_config.h | -rw-r--r-- | 508 bytes |
| init.sh | -rwxr-xr-x | 18.5 KB |
| netdev_config.h | -rw-r--r-- | 375 bytes |
| node_config.h | -rw-r--r-- | 6.8 KB |
Computing file changes ...
