kernel-netlink: Alternatively support global port based IKE bypass policies
authorMartin Willi <martin@revosec.ch>
Wed, 16 Jul 2014 14:31:52 +0000 (16:31 +0200)
committerMartin Willi <martin@revosec.ch>
Fri, 21 Nov 2014 09:55:45 +0000 (10:55 +0100)
The socket based IKE bypass policies are usually superior, but not supported
on all networking stacks. The port based variant uses global policies for the
UDP ports we have IKE sockets for.


No differences found