Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb
From: Florian Westphal <fw@xxxxxxxxx>
Date: Tue, 12 Mar 2024 13:24:17 +0100
Cc: edumazet@xxxxxxxxxx, pablo@xxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxx, fw@xxxxxxxxx, kuba@xxxxxxxxxx, pabeni@xxxxxxxxxx, davem@xxxxxxxxxxxxx, netfilter-devel@xxxxxxxxxxxxxxx, coreteam@xxxxxxxxxxxxx, netdev@xxxxxxxxxxxxxxx, Jason Xing <kernelxing@xxxxxxxxxxx>
In-reply-to: <20240311070550.7438-1-kerneljasonxing@gmail.com>
User-agent: Mutt/1.10.1 (2018-07-13)

Jason Xing <kerneljasonxing@xxxxxxxxx> wrote:
> I think, even we have set DNAT policy, it would be better if the
> whole process/behaviour adheres to the original TCP behaviour as
> default.

LGTM.
Acked-by: Florian Westphal <fw@xxxxxxxxx>

Follow-Ups:
- Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb
  - From: Jason Xing

References:
- [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb
  - From: Jason Xing

Prev by Date: Re: iptables-nft: Wrong payload merge of rule filter - "! --sport xx ! --dport xx"
Next by Date: Re: [PATCH v3 nf-next 2/2] netfilter: nf_tables: support updating userdata for nft_table
Previous by thread: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb
Next by thread: Re: [PATCH nf-next v2] netfilter: conntrack: avoid sending RST to reply out-of-window skb
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [Berkeley Packet Filter] [LARTC] [Bugtraq] [Yosemite Forum]

Powered by Linux