]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: synproxy: send mss option to backend
authorMartin Topholm <mph@one.com>
Thu, 14 Nov 2013 14:35:30 +0000 (15:35 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 18 Nov 2013 11:53:36 +0000 (12:53 +0100)
commit487f9421973125e637a489fe17202d75d2ee6869
tree4a7eee423866ce6ee48c8a64ba43c30fbe2e97ee
parentab5d97491c8f79a691ff06b9a710e9ef4e11da11
netfilter: synproxy: send mss option to backend

When the synproxy_parse_options is called on the client ack the mss
option will not be present. Consequently mss wont be included in the
backend syn packet, which falls back to 536 bytes mss.

Therefore XT_SYNPROXY_OPT_MSS is explicitly flagged when recovering mss
value from cookie.

Signed-off-by: Martin Topholm <mph@one.com>
Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/ipt_SYNPROXY.c
net/ipv6/netfilter/ip6t_SYNPROXY.c