https://github.com/torvalds/linux
Revision d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3 authored by Dong Wei on 04 June 2008, 16:57:51 UTC, committed by David S. Miller on 04 June 2008, 16:57:51 UTC
In xt_connlimit match module, the counter of an IP is decreased when
the TCP packet is go through the chain with ip_conntrack state TW.
Well, it's very natural that the server and client close the socket
with FIN packet. But when the client/server close the socket with RST
packet(using so_linger), the counter for this connection still exsit.
The following patch can fix it which is based on linux-2.6.25.4

Signed-off-by: Dong Wei <dwei.zh@gmail.com>
Acked-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent ab32cd7
History
Tip revision: d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3 authored by Dong Wei on 04 June 2008, 16:57:51 UTC
netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state
Tip revision: d2ee3f2
File Mode Size
Documentation
arch
block
crypto
drivers
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
usr
virt
.gitignore -rw-r--r-- 686 bytes
.mailmap -rw-r--r-- 3.6 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 90.5 KB
Kbuild -rw-r--r-- 2.4 KB
MAINTAINERS -rw-r--r-- 98.3 KB
Makefile -rw-r--r-- 53.8 KB
README -rw-r--r-- 16.5 KB
REPORTING-BUGS -rw-r--r-- 3.1 KB

README

back to top