[ovs-git] Open vSwitch: ipsec: install iptables rules that set IPsec bit in skb mark (branch-1.10)

[dev at openvswitch.org]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Open vSwitch".

The branch, branch-1.10 has been updated
       via  f34dcab88b492da263403d3eba647f8c65d71a85 (commit)
      from  db751c4840ce5480f9c5bfa4dec8f84cceb45fe9 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f34dcab88b492da263403d3eba647f8c65d71a85
Diffs: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=commitdiff;h=f34dcab88b492da263403d3eba647f8c65d71a85
Author: Ansis Atteka <aatteka at nicira.com>
		
ipsec: install iptables rules that set IPsec bit in skb mark
		
Without these two iptables rules (one for UDP encapsulated IPsec and
another for direct IPsec), ovs-vswitchd would incorrectly conclude
that GRE packet belonged to a plain GRE tunnel instead of IPsec GRE
tunnel.

Reported-by: Aryan TaheriMonfared <aryan.taherimonfared at uis.no>
Reported-by: Daniel Hiltgen <daniel at netkine.com>
Signed-off-by: Ansis Atteka <aatteka at nicira.com>


-----------------------------------------------------------------------

Summary of changes:
 AUTHORS                       |    2 ++
 debian/openvswitch-ipsec.init |   14 ++++++++++++++
 2 files changed, 16 insertions(+)


hooks/post-receive
-- 
Open vSwitch