Subject: Re: [IPSEC]: Fix reversed ICMP6 policy check

From: David Miller <[email-masked]>
Date: Wed, 12 Dec 2007 18:54:46 -0800 (PST)

From: Herbert Xu <[email-masked]>
Date: Thu, 13 Dec 2007 10:51:56 +0800

> You're too quick :) Before you ask for an incremental patch, here's
> a preemptive strike :)

Hehe :)

> [IPSEC]: Do not let packets pass when ICMP flag is off
> 
> This fixes a logical error in ICMP policy checks which lets
> packets through if the state ICMP flag is off.
> 
> Signed-off-by: Herbert Xu <[email-masked]>

Applied, thanks!