Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8f5bd990 authored by Willy Tarreau's avatar Willy Tarreau Committed by David S. Miller
Browse files

[NETFILTER]: TCP conntrack: accept RST|PSH as valid 



This combination has been encountered on an IBM AS/400 in response
to packets sent to a closed session. There is no particular reason
to mark it invalid.

Signed-off-by: default avatarWilly Tarreau <w@1wt.eu>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent e7ac05f3

net/netfilter/nf_conntrack_proto_tcp.c

+1 −0
Original line number Diff line number Diff line
@@ -774,6 +774,7 @@ static u8 tcp_valid_flags[(TH_FIN|TH_SYN|TH_RST|TH_PUSH|TH_ACK|TH_URG) + 1] = 
	[TH_SYN|TH_ACK]			= 1,

	[TH_SYN|TH_ACK|TH_PUSH]		= 1,

	[TH_RST]			= 1,

	[TH_RST|TH_PUSH]		= 1,

	[TH_RST|TH_ACK]			= 1,

	[TH_RST|TH_ACK|TH_PUSH]		= 1,

	[TH_FIN|TH_ACK]			= 1,