On 20 October 2016 at 20:14, Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote:
>
> There is a 'TCPWindowTracking' option that you can set on from the
> configuration file.
>
> Is that probably what Mathew needs?
@Mathew, could you please share what are your problems with this
conntrackd code?
/* disable TCP window tracking for recovered connections if required */
if (nfct_attr_is_set(ct, ATTR_TCP_STATE)) {
uint8_t flags = IP_CT_TCP_FLAG_SACK_PERM;
if (!CONFIG(sync).tcp_window_tracking)
flags |= IP_CT_TCP_FLAG_BE_LIBERAL;
else
flags |= IP_CT_TCP_FLAG_WINDOW_SCALE;
[...]
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
