Module Name:	src
Committed By:	scw
Date:		Mon Nov 24 20:54:59 UTC 2003

Modified Files:
	src/sys/netinet: ip_input.c
	src/sys/netipsec: ipsec.h

Log Message:
For FAST_IPSEC, ipfilter gets to see wire-format IPsec-encapsulated packets
only. Decapsulated packets bypass ipfilter. This mimics current behaviour
for Kame IPsec.


To generate a diff of this commit:
cvs rdiff -r1.185 -r1.186 src/sys/netinet/ip_input.c
cvs rdiff -r1.3 -r1.4 src/sys/netipsec/ipsec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.