View | Details | Raw Unified | Return to bug 197484
Collapse All | Expand All

(-)sys/netpfil/pf/pf.c (-1 / +1 lines)
Lines 4199-4205 Link Here
4199
			    TH_SYN|TH_ACK, 0, (*state)->src.mss, 0, 1, 0, NULL);
4199
			    TH_SYN|TH_ACK, 0, (*state)->src.mss, 0, 1, 0, NULL);
4200
			REASON_SET(reason, PFRES_SYNPROXY);
4200
			REASON_SET(reason, PFRES_SYNPROXY);
4201
			return (PF_SYNPROXY_DROP);
4201
			return (PF_SYNPROXY_DROP);
4202
		} else if (!(th->th_flags & TH_ACK) ||
4202
		} else if ((th->th_flags & (TH_ACK|TH_RST|TH_FIN)) != TH_ACK ||
4203
		    (ntohl(th->th_ack) != (*state)->src.seqhi + 1) ||
4203
		    (ntohl(th->th_ack) != (*state)->src.seqhi + 1) ||
4204
		    (ntohl(th->th_seq) != (*state)->src.seqlo + 1)) {
4204
		    (ntohl(th->th_seq) != (*state)->src.seqlo + 1)) {
4205
			REASON_SET(reason, PFRES_SYNPROXY);
4205
			REASON_SET(reason, PFRES_SYNPROXY);

Return to bug 197484