Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2005-06-12 12:06:27
On Sun, Jun 12, 2005 at 01:40:39PM +0200, Willy Tarreau wrote:
Sorry Herbert, but both RFC793 page 32 figure 9 and my Linux box disagree with this statement. Look: at line 5, A rejects the SYN-ACK because the ACK is wrong during the session setup.
Look at the first check inside th->ack in tcp_rcv_synsent_state_process. -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt