Skip to main content

Browse the archive

Revision 00bb13bdf2757dc8dbe8b92ae1c29bd7d0fad668 authored by Paul Chaignon on 07 June 2023, 15:37:53 UTC, committed by Sebastian Wicki on 13 June 2023, 19:22:04 UTC 
ipsec: Fix IPv6 wildcard CIDR used in some IPsec policies
 
[ upstream commit d0ab559441311dbe0908834a86d633aa9eeb6a84 ]

We use this wildcard IPv6 CIDR in the catch-all default-drop OUT policy
as well as in the FWD policy. It was incorrectly set to ::/128 instead
of ::/0 and would therefore not match anything instead of matching
everything. This commit fixes it.

Fixes: e802c2985 ("ipsec: Refactor wildcard IP variables")
Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
Signed-off-by: Sebastian Wicki <sebastian@isovalent.com>
1 parent 3a5aa36
History
File Mode Size
integrations.sh -rw-r--r-- 2.8 KB
back to top