From: Eric Dumazet <dada1@cosmosbay.com>
To: Rick Jones <rick.jones2@hp.com>
Cc: Caitlin Bestler <caitlin.bestler@gmail.com>,
Martin Schiller <mschiller@tdt.de>,
netdev@vger.kernel.org
Subject: Re: Suppress / delay SYN-ACK
Date: Fri, 13 Oct 2006 06:11:16 +0200 [thread overview]
Message-ID: <452F11E4.8050508@cosmosbay.com> (raw)
In-Reply-To: <452EC7B9.2030801@hp.com>
Rick Jones a écrit :
>> More to the point, on what basis would the application be rejecting a
>> connection request based solely on the SYN?
>
> True, it isn't like there would suddenly be any call user data as in
> XTI/TLI.
DATA payload could be included in the SYN packet. TCP specs allow this AFAIK.
About iptables rules added on the fly by an application that want to protect
its listen queue from random sources of 'blacklisted' peers, this has the
limitation of granting sufficient rights to the user running the application.
Eric
next prev parent reply other threads:[~2006-10-13 4:11 UTC|newest]
Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-10-12 8:08 Suppress / delay SYN-ACK Martin Schiller
2006-10-12 8:38 ` Eric Dumazet
2006-10-12 10:13 ` Martin Schiller
2006-10-12 10:31 ` Evgeniy Polyakov
2006-10-12 10:39 ` Eric Dumazet
2006-10-12 10:53 ` Evgeniy Polyakov
2006-10-12 10:36 ` Eric Dumazet
2006-10-12 16:13 ` Rick Jones
2006-10-12 21:58 ` Caitlin Bestler
2006-10-12 22:12 ` jamal
2006-10-12 22:54 ` Rick Jones
2006-10-13 0:57 ` Stephen Hemminger
2006-10-13 4:11 ` Eric Dumazet [this message]
2006-10-13 16:39 ` Rick Jones
2006-10-13 20:13 ` Eric Dumazet
2006-10-13 21:50 ` Rick Jones
2006-10-16 6:52 ` Martin Schiller
2006-10-13 5:41 ` Stephen J. Bevan
2006-10-13 6:28 ` Martin Schiller
2006-10-16 7:02 ` Lennert Buytenhek
2006-10-17 12:04 ` Martin Schiller
2006-10-17 12:54 ` Eric Dumazet
2006-10-18 6:23 ` Martin Schiller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=452F11E4.8050508@cosmosbay.com \
--to=dada1@cosmosbay.com \
--cc=caitlin.bestler@gmail.com \
--cc=mschiller@tdt.de \
--cc=netdev@vger.kernel.org \
--cc=rick.jones2@hp.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).