diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-03-21 11:38:32 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-03-24 15:17:18 +0100 |
| commit | f2dd495a8d589371289981d5ed33e6873df94ecc (patch) | |
| tree | 5001723634f0f749b758c4f25ca7fb44672f5a19 /scripts/atomic | |
| parent | netfilter: egress: Report interface as outgoing (diff) | |
| download | linux-f2dd495a8d589371289981d5ed33e6873df94ecc.tar.xz linux-f2dd495a8d589371289981d5ed33e6873df94ecc.zip | |
netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
Do not reset IP_CT_TCP_FLAG_BE_LIBERAL flag in out-of-sync scenarios
coming before the TCP window tracking, otherwise such connections will
fail in the window check.
Update tcp_options() to leave this flag in place and add a new helper
function to reset the tcp window state.
Based on patch from Sven Auhagen.
Fixes: c4832c7bbc3f ("netfilter: nf_ct_tcp: improve out-of-sync situation in TCP tracking")
Tested-by: Sven Auhagen <sven.auhagen@voleatech.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts/atomic')
0 files changed, 0 insertions, 0 deletions