]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state
authorDong Wei <dwei.zh@gmail.com>
Wed, 4 Jun 2008 16:57:51 +0000 (09:57 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 4 Jun 2008 16:57:51 +0000 (09:57 -0700)
commit487145ea3b971de3fe93350fba5ab54ccae361c2
tree081c903c68a0df98f0ac1f3a73f480d801af0689
parent8e47e523a69202f7eef5ff08f519c7cbecca6518
netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state

In xt_connlimit match module, the counter of an IP is decreased when
the TCP packet is go through the chain with ip_conntrack state TW.
Well, it's very natural that the server and client close the socket
with FIN packet. But when the client/server close the socket with RST
packet(using so_linger), the counter for this connection still exsit.
The following patch can fix it which is based on linux-2.6.25.4

Signed-off-by: Dong Wei <dwei.zh@gmail.com>
Acked-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/netfilter/xt_connlimit.c