From: Vlad Drukker <vlad@storewiz.com>
To: coreteam@netfilter.org
Cc: netfilter-devel@lists.netfilter.org
Subject: [PATCH] ip_conntrack_proto_tcp
Date: Thu, 10 Nov 2005 17:48:50 +0200 [thread overview]
Message-ID: <1131637730.14044.12.camel@quant> (raw)
[-- Attachment #1: Type: text/plain, Size: 207 bytes --]
Hi there,
Attached patch for ip_conntrack to account TCP sessions started with SYN
+PUSH flags. Looks weird, but some HW vendors do TCP their own way.
Let's earn some points from RFC 1025.
Cheers,
Vlad.
[-- Attachment #2: SYN_PUSH.patch --]
[-- Type: text/x-patch, Size: 1085 bytes --]
[NETFILTER] ip_conntrack SYN PUSH patch
Some Qlogic iSCSI HBA hardware like QLA4010 up to firmware 3.0.0.4
initiates TCP with SYN and PUSH flags set.
Linux TCP/IP stack works fine with that.
Make ip_conntrack do the same.
Signed-off-by: Vlad Drukker <vlad@storewiz.com>
---
commit c02dd55183e5f8330da96fb82291a76492b6e7c4
tree 0aca6b3836eef97bfc552ed00883ce8f73c3e5f9
parent 407cf928e19d8cd8bb91160da6fd7a900b1e4705
author <vlad@storewiz.com> Thu, 10 Nov 2005 17:07:25 +0200
committer <vlad@storewiz.com> Thu, 10 Nov 2005 17:07:25 +0200
net/ipv4/netfilter/ip_conntrack_proto_tcp.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/net/ipv4/netfilter/ip_conntrack_proto_tcp.c b/net/ipv4/netfilter/ip_conntrack_proto_tcp.c
--- a/net/ipv4/netfilter/ip_conntrack_proto_tcp.c
+++ b/net/ipv4/netfilter/ip_conntrack_proto_tcp.c
@@ -813,6 +813,7 @@ static u8 tcp_valid_flags[(TH_FIN|TH_SYN
{
[TH_SYN] = 1,
[TH_SYN|TH_ACK] = 1,
+ [TH_SYN|TH_PUSH] = 1,
[TH_SYN|TH_ACK|TH_PUSH] = 1,
[TH_RST] = 1,
[TH_RST|TH_ACK] = 1,
next reply other threads:[~2005-11-10 15:48 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-11-10 15:48 Vlad Drukker [this message]
2005-11-11 13:00 ` [PATCH] ip_conntrack_proto_tcp Pablo Neira
2005-11-11 13:02 ` Pablo Neira
2005-11-11 13:58 ` [netfilter-core] " Patrick McHardy
2005-11-11 19:48 ` David S. Miller
2005-11-12 10:39 ` [PATCH] [NETFILTER]: Allow SYN+PSH as valid flag combination Harald Welte
2005-11-12 20:14 ` David S. Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1131637730.14044.12.camel@quant \
--to=vlad@storewiz.com \
--cc=coreteam@netfilter.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.