Try to make the `syn' blocking code act a bit more sensibly - don't
block `syn' packets that have `ack' set. Reviewed by: Submitted by: Obtained from:
This commit is contained in:
parent
f0448ae4a2
commit
7d4aa0825d
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=9820
@ -11,7 +11,7 @@
|
||||
*
|
||||
* This software is provided ``AS IS'' without any warranties of any kind.
|
||||
*
|
||||
* $Id$
|
||||
* $Id: ip_fw.c,v 1.21 1995/07/23 05:36:29 davidg Exp $
|
||||
*/
|
||||
|
||||
/*
|
||||
@ -153,7 +153,7 @@ ip_fw_chk(m, ip, rif, chain)
|
||||
dprintf1("TCP ");
|
||||
src_port = ntohs(tcp->th_sport);
|
||||
dst_port = ntohs(tcp->th_dport);
|
||||
if (tcp->th_flags & TH_SYN)
|
||||
if ((tcp->th_flags & TH_SYN) && !(tcp->th_flags & TH_ACK))
|
||||
notcpsyn = 0; /* We *DO* have SYN ,value FALSE */
|
||||
prt = IP_FW_F_TCP;
|
||||
break;
|
||||
|
Loading…
Reference in New Issue
Block a user