NetKVM: Fix dropping IPv6 IPsec packets.
Explicitly treat IPv6 ESP packet as usual packet (TCP, UDP, etc.).
ESP header should not be treated like other extension headers.
Because it does not start with 'Next Header' and 'Hdr Ext Len' fields and next header is encrypted.
@@ -955,6 +955,8 @@ BOOLEAN AnalyzeIP6Hdr(
case PROTOCOL_UDP:
__fallthrough;
case IP6_HDR_FRAGMENT:
+ __fallthrough;
+ case IP6_HDR_ESP:
return TRUE;
case IP6_HDR_DESTINATION:
{
@@ -987,8 +989,6 @@ BOOLEAN AnalyzeIP6Hdr(
break;
case IP6_HDR_HOP_BY_HOP:
__fallthrough;
- case IP6_HDR_ESP:
- __fallthrough;
case IP6_HDR_AUTHENTICATION:
__fallthrough;
case IP6_HDR_MOBILITY:
