diff options
author | Dong Wei <dwei.zh@gmail.com> | 2008-06-04 09:57:51 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2008-06-04 09:57:51 -0700 |
commit | d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3 (patch) | |
tree | 081c903c68a0df98f0ac1f3a73f480d801af0689 /CREDITS | |
parent | ab32cd793dca21eec846a8204390d9594ed994d5 (diff) | |
download | op-kernel-dev-d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3.zip op-kernel-dev-d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3.tar.gz |
netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state
In xt_connlimit match module, the counter of an IP is decreased when
the TCP packet is go through the chain with ip_conntrack state TW.
Well, it's very natural that the server and client close the socket
with FIN packet. But when the client/server close the socket with RST
packet(using so_linger), the counter for this connection still exsit.
The following patch can fix it which is based on linux-2.6.25.4
Signed-off-by: Dong Wei <dwei.zh@gmail.com>
Acked-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'CREDITS')
0 files changed, 0 insertions, 0 deletions