d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Follow the RFC 3128 and drop short TCP fragments with offset = 1.

Browse Source 
Reported by:	emaste
MFC after:	1 week
This commit is contained in:
Andrey V. Elsukov 2019-06-25 11:40:37 +00:00
parent 7d4b2d5244
commit 019c8c9330
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=349366
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/netpfil/ipfw/ip_fw2.c
View File

@ -1719,6 +1719,11 @@ do { \
default:
break;
}
} else {
if (offset == 1 && proto == IPPROTO_TCP) {
/* RFC 3128 */
goto pullup_failed;
}
}
UPDATE_POINTERS();