From: Eliezer Croitoru <eliezer@ngtech.co.il>
To: Brian G <bgunlogson5@comcast.net>
Cc: netfilter@vger.kernel.org
Subject: Re: TPROXY doesn't properly close connections in Linux 2.6.39
Date: Mon, 08 Oct 2012 21:04:50 +0200 [thread overview]
Message-ID: <507323D2.4090200@ngtech.co.il> (raw)
In-Reply-To: <50722737.3050202@comcast.net>
On 10/8/2012 3:07 AM, Brian G wrote:
> I found this changelog on Wed, 19 Oct 2011 07:21:35:
>
> tproxy: copy transparent flag when creating a time wait
>
> The transparent socket option setting was not copied to the time wait
> socket when an inet socket was being replaced by a time wait socket. This
> broke the --transparent option of the socket match and may have caused
> that FIN packets belonging to sockets in FIN_WAIT2 or TIME_WAIT state
> were being dropped by the packet filter.
>
> Does this look like a fix to the problem I was having? What kernel
> version on kernel.org is this patch included in?
TPROXY is only a socket it wont close itself.. the software should know
the state and other stuff on it and close it.
you should look at the software part to see why it wont close the
connection and move on from there.
Regards,
Eliezer
prev parent reply other threads:[~2012-10-08 19:04 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-10-07 23:38 TPROXY doesn't properly close connections in Linux 2.6.39 Brian G
2012-10-08 1:07 ` Brian G
2012-10-08 19:04 ` Eliezer Croitoru [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=507323D2.4090200@ngtech.co.il \
--to=eliezer@ngtech.co.il \
--cc=bgunlogson5@comcast.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.