elwix/patches/freebsd.pf.3whs.PR197484.patch - diff

Return to freebsd.pf.3whs.PR197484.patch CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / elwix / patches

-version 1.1, 2017/06/13 17:50:07
+version 1.2, 2021/03/11 13:59:52
- Line 0
+ Line 1
+ Index: sys/netpfil/pf/pf.c
+ ===================================================================
+ --- sys/netpfil/pf/pf.c (revision 277815)
+ +++ sys/netpfil/pf/pf.c (working copy)
+ @@ -4199,7 +4199,7 @@
+                             TH_SYN|TH_ACK, 0, (*state)->src.mss, 0, 1, 0, NULL);
+                         REASON_SET(reason, PFRES_SYNPROXY);
+                         return (PF_SYNPROXY_DROP);
+ -               } else if (!(th->th_flags & TH_ACK) ||
+ +               } else if ((th->th_flags & (TH_ACK|TH_RST|TH_FIN)) != TH_ACK ||
+                     (ntohl(th->th_ack) != (*state)->src.seqhi + 1) ||
+                     (ntohl(th->th_seq) != (*state)->src.seqlo + 1)) {
+                         REASON_SET(reason, PFRES_SYNPROXY);