From: Patrick McHardy <kaber@xxxxxxxxx> Date: Fri, 23 Aug 2013 09:52:03 +0200 > The following patches contain the current version of the SYNPROXY target. > Changes this the last posting are: > > - use sysctl_ip_default_ttl instead of hardcoding 64 > > - use MAX_TCP_HEADER instead of LL_MAX_HEADER > > - add some comments requested by Jesper regarding ack_seq initialization > in the server's SYN packet > > - use consume_skb() instead of kfree_skb() in the synproxy hook > > - remove a fixme and add explicit check for "-p tcp" in the SYNPROXY rule > in the IPv6 version > > - some whitespace fixes > > - a larger number of fixes for properly handling retransmissions and > out of order packets, please see the changelog included in patch 6/6 > for details. > > I've kept those in a seperate patch for now to ease review, we'll do > some more extensive testing on monday and I'll fold the changes in > their respective patches before the final submission. > > Comments welcome. No objections to the non-netfilter portions: Acked-by: David S. Miller <davem@xxxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
