FreeBSD Bugzilla – Attachment 152799 Details for
Bug 197484
fix pf 3whs ACK handling
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
the fix
freebsd.pf.synproxy.patch (text/plain), 593 bytes, created by
krichy
on 2015-02-09 15:54:54 UTC
(
hide
)
Description:
the fix
Filename:
MIME Type:
Creator:
krichy
Created:
2015-02-09 15:54:54 UTC
Size:
593 bytes
patch
obsolete
>Index: sys/netpfil/pf/pf.c >=================================================================== >--- sys/netpfil/pf/pf.c (revision 277815) >+++ sys/netpfil/pf/pf.c (working copy) >@@ -4199,7 +4199,7 @@ > TH_SYN|TH_ACK, 0, (*state)->src.mss, 0, 1, 0, NULL); > REASON_SET(reason, PFRES_SYNPROXY); > return (PF_SYNPROXY_DROP); >- } else if (!(th->th_flags & TH_ACK) || >+ } else if ((th->th_flags & (TH_ACK|TH_RST|TH_FIN)) != TH_ACK || > (ntohl(th->th_ack) != (*state)->src.seqhi + 1) || > (ntohl(th->th_seq) != (*state)->src.seqlo + 1)) { > REASON_SET(reason, PFRES_SYNPROXY);
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=152799">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 197484
: 152799