summaryrefslogtreecommitdiff
path: root/net/netfilter
diff options
context:
space:
mode:
authorWilly Tarreau <w@1wt.eu>2007-03-14 16:44:31 -0700
committerDavid S. Miller <davem@sunset.davemloft.net>2007-04-25 22:25:56 -0700
commit8f5bd99071212cd16b3449d16639971a44540d51 (patch)
tree359a4e81830ff71dbd8b3e2e694a68a1fe99b043 /net/netfilter
parente7ac05f3407a3fb5a1b2ff5d5554899eaa0a10a3 (diff)
[NETFILTER]: TCP conntrack: accept RST|PSH as valid
This combination has been encountered on an IBM AS/400 in response to packets sent to a closed session. There is no particular reason to mark it invalid. Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter')
-rw-r--r--net/netfilter/nf_conntrack_proto_tcp.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/netfilter/nf_conntrack_proto_tcp.c b/net/netfilter/nf_conntrack_proto_tcp.c
index 9e496319f606..926e302494f3 100644
--- a/net/netfilter/nf_conntrack_proto_tcp.c
+++ b/net/netfilter/nf_conntrack_proto_tcp.c
@@ -774,6 +774,7 @@ static u8 tcp_valid_flags[(TH_FIN|TH_SYN|TH_RST|TH_PUSH|TH_ACK|TH_URG) + 1] =
[TH_SYN|TH_ACK] = 1,
[TH_SYN|TH_ACK|TH_PUSH] = 1,
[TH_RST] = 1,
+ [TH_RST|TH_PUSH] = 1,
[TH_RST|TH_ACK] = 1,
[TH_RST|TH_ACK|TH_PUSH] = 1,
[TH_FIN|TH_ACK] = 1,