CVS: cvs.openbsd.org: src

["Angelos D. Keromytis" <angelos_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	angelos_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2000/09/25 19:02:26

Modified files:
	sys/netinet    : ip_icmp.c 

Log message:
Update to previous fix on ICMP messages coming on unnumbered
interfaces: rather than picking *some* non-loopback IP address,
do a routing lookup and use as source IP address the address of the
outgoing interface. A nice side effect of this is that ICMPs generated
as a result of packets received over IPsec will, in the common case,
end up going back over IPsec (depends on what the SPD looks like of
course). Thanks to fcusack_(_at_)_fcusack_(_dot_)_com for testing and commenting on
this.