]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: synproxy: fix erroneous tcp mss option
authorFernando Fernandez Mancera <ffmancera@riseup.net>
Wed, 10 Jul 2019 10:05:57 +0000 (12:05 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 16 Jul 2019 11:17:01 +0000 (13:17 +0200)
commit9e8338a1fc1d1b818b2da5a7ff888fa6e7e663c3
tree446974de0e1933d23c2b080b815a31b473b3f736
parent9d4da4c99ece652eae30fb0902d69ef0b0d085c7
netfilter: synproxy: fix erroneous tcp mss option

Now synproxy sends the mss value set by the user on client syn-ack packet
instead of the mss value that client announced.

Fixes: 7e21fed54782 ("netfilter: add SYNPROXY core/target")
Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_conntrack_synproxy.h
net/ipv4/netfilter/ipt_SYNPROXY.c
net/ipv6/netfilter/ip6t_SYNPROXY.c
net/netfilter/nf_synproxy_core.c
net/netfilter/nft_synproxy.c