d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Follow the RFC 3128 and drop short TCP fragments with offset = 1.

Browse Source 
Reported by:	emaste
MFC after:	1 week
This commit is contained in:
Andrey V. Elsukov 2019-06-25 11:40:37 +00:00
parent 7d4b2d5244
commit 019c8c9330
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/netpfil/ipfw/ip_fw2.c
View File

@ -1719,6 +1719,11 @@ do { \
default:
break;
}
} else {
if (offset == 1 && proto == IPPROTO_TCP) {
/* RFC 3128 */
goto pullup_failed;
}
}
UPDATE_POINTERS();