diff options
author | Phil Sutter <phil@nwl.cc> | 2015-07-28 00:53:26 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-08-10 13:55:07 +0200 |
commit | 3c16241c445303a90529565e7437e1f240acfef2 (patch) | |
tree | d487541d2b43e7d8ded82679feecde7d25c1601d /net/netlabel | |
parent | 96fffb4f23f124f297d51dedc9cf51d19eb88ee1 (diff) | |
download | linux-3c16241c445303a90529565e7437e1f240acfef2.tar.gz linux-3c16241c445303a90529565e7437e1f240acfef2.tar.bz2 linux-3c16241c445303a90529565e7437e1f240acfef2.zip |
netfilter: SYNPROXY: fix sending window update to client
Upon receipt of SYNACK from the server, ipt_SYNPROXY first sends back an ACK to
finish the server handshake, then calls nf_ct_seqadj_init() to initiate
sequence number adjustment of forwarded packets to the client and finally sends
a window update to the client to unblock it's TX queue.
Since synproxy_send_client_ack() does not set synproxy_send_tcp()'s nfct
parameter, no sequence number adjustment happens and the client receives the
window update with incorrect sequence number. Depending on client TCP
implementation, this leads to a significant delay (until a window probe is
being sent).
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netlabel')
0 files changed, 0 insertions, 0 deletions