Try to make the `syn' blocking code act a bit more sensibly - don't

block `syn' packets that have `ack' set.
Reviewed by:
Submitted by:
Obtained from:
This commit is contained in:
Gary Palmer 1995-07-31 13:58:35 +00:00
parent f0448ae4a2
commit 7d4aa0825d
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=9820

View File

@ -11,7 +11,7 @@
*
* This software is provided ``AS IS'' without any warranties of any kind.
*
* $Id$
* $Id: ip_fw.c,v 1.21 1995/07/23 05:36:29 davidg Exp $
*/
/*
@ -153,7 +153,7 @@ ip_fw_chk(m, ip, rif, chain)
dprintf1("TCP ");
src_port = ntohs(tcp->th_sport);
dst_port = ntohs(tcp->th_dport);
if (tcp->th_flags & TH_SYN)
if ((tcp->th_flags & TH_SYN) && !(tcp->th_flags & TH_ACK))
notcpsyn = 0; /* We *DO* have SYN ,value FALSE */
prt = IP_FW_F_TCP;
break;