From: Patrick McHardy <kaber@xxxxxxxxx> Date: Wed, 04 Jun 2008 18:17:52 +0200 > [NETFILTER]: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state > > In xt_connlimit match module, the counter of an IP is decreased when > the TCP packet is go through the chain with ip_conntrack state TW. > Well, it's very natural that the server and client close the socket > with FIN packet. But when the client/server close the socket with RST > packet(using so_linger), the counter for this connection still exsit. > The following patch can fix it which is based on linux-2.6.25.4 > > Signed-off-by: Dong Wei <dwei.zh@xxxxxxxxx> > Acked-by: Jan Engelhardt <jengelh@xxxxxxxxxx> > Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx> Applied. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
