Le vendredi 03 février 2012 à 12:16 -0800, Shawn Lu a écrit :
Binding RST packet outgoing interface to incomming interface
for tcp v4. This has few benefits:
1. tcp_v6_send_reset already did that.
I dont think so. ipv6 makes no special provision for RST.
2. This helps tcp connect with SO_BINDTODEVICE set. When connection
is lost, we still able to sending out RST using same interface.
I dont understand this.
3. limit RST traffic in ingress interface reduce the impact of
RST attack.
I dont understand this.
Me confused.
Why RST are special and should bypass/force routing decisions ?
This is going to break some setups.