diff options
-rw-r--r-- | sbin/ip6fw/ip6fw.8 | 1 | ||||
-rw-r--r-- | sys/netinet6/ip6_fw.c | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/sbin/ip6fw/ip6fw.8 b/sbin/ip6fw/ip6fw.8 index 9ba2273..2e4c777 100644 --- a/sbin/ip6fw/ip6fw.8 +++ b/sbin/ip6fw/ip6fw.8 @@ -235,7 +235,6 @@ TCP packets only. Discard packets that match this rule, and try to send a TCP reset (RST) notice. The search terminates -.Em ( "not working yet" ) . .It Ar count Update counters for all packets that match rule. The search continues with the next rule. diff --git a/sys/netinet6/ip6_fw.c b/sys/netinet6/ip6_fw.c index 370ff78..11faa80 100644 --- a/sys/netinet6/ip6_fw.c +++ b/sys/netinet6/ip6_fw.c @@ -810,6 +810,8 @@ got_match: *m = 0; break; } + if (tcp->th_flags & TH_SYN) + ack++; seq = 0; flags = TH_RST|TH_ACK; } |