Re: [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state
From: Florian Westphal <fw@xxxxxxxxx>
Date: Tue, 20 Apr 2021 14:25:32 +0200
Cc: netfilter-devel@xxxxxxxxxxxxxxx
In-reply-to: <20210420122415.v2jtayiw3n4ds7t7@Fryzen495>
User-agent: Mutt/1.10.1 (2018-07-13)

Ali Abdallah <ali.abdallah@xxxxxxxx> wrote:
> In ignore state, we let SYN goes in original, the server might respond
> with RST/ACK, and that RST packet is erroneously dropped because of the
> flag IP_CT_TCP_FLAG_MAXACK_SET being already set.

Acked-by: Florian Westphal <fw@xxxxxxxxx>

References:
- [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state
  - From: Ali Abdallah

Prev by Date: [PATCH nf-next 04/12] netfilter: iptables: unregister the tables by name
Next by Date: [PATCH nf-next 05/12] netfilter: ip6tables: unregister the tables by name
Previous by thread: [PATCH] netfilter: conntrack: Reset the max ACK flag on SYN in ignore state
Next by thread: [PATCH nf-next 00/12] netfilter: remove xtables pointers from struct net
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [Berkeley Packet Filter] [LARTC] [Bugtraq] [Yosemite Forum]

Powered by Linux