projects / kernel / kernel-generic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4819224) | patch
netfilter: synproxy: send mss option to backend
authorMartin Topholm <mph@one.com>
Thu, 14 Nov 2013 14:35:30 +0000 (15:35 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 18 Nov 2013 11:53:36 +0000 (12:53 +0100)
commita6441b7a39f18acb68c83cd738f1310881aa8a0b
tree4a7eee423866ce6ee48c8a64ba43c30fbe2e97eetree | snapshot
parent4819224853dff325f0aabdb3dc527d768fa482e3commit | diff
netfilter: synproxy: send mss option to backend

When the synproxy_parse_options is called on the client ack the mss
option will not be present. Consequently mss wont be included in the
backend syn packet, which falls back to 536 bytes mss.

Therefore XT_SYNPROXY_OPT_MSS is explicitly flagged when recovering mss
value from cookie.

Signed-off-by: Martin Topholm <mph@one.com>
Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/ipt_SYNPROXY.c diff | blob | history
net/ipv6/netfilter/ip6t_SYNPROXY.c diff | blob | history
Domain: System / Uncategorized;