K 10
svn:author
V 3
ume
K 8
svn:date
V 27
2004-02-19T14:57:22.000000Z
K 7
svn:log
V 479
- call ip6_output() instead of nd6_output() when ipsec tunnel
  mode is applied, since tunneled packets are considered to be
  generated packets from a tunnel encapsulating node.
- tunnel mode may not be applied if SA mode is ANY and policy
  does not say "tunnel it".  check if we have extra IPv6 header
  on the packet after ipsec6_output_tunnel() and call ip6_output()
  only if additional IPv6 header is added.
- free the copyed packet before returning.

Obtained from:	KAME

END