]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/commit
netfilter: tcp conntrack: fix unacknowledged data detection with NAT
authorPatrick McHardy <kaber@trash.net>
Mon, 29 Jun 2009 12:07:56 +0000 (14:07 +0200)
committerPatrick McHardy <kaber@trash.net>
Mon, 29 Jun 2009 12:07:56 +0000 (14:07 +0200)
commita3a9f79e361e864f0e9d75ebe2a0cb43d17c4272
treee38bb7cc051cf197a813d553713e3071d375a1b9
parent308ff823ebd749a94d3b6ac26b95bc0eb114c39e
netfilter: tcp conntrack: fix unacknowledged data detection with NAT

When NAT helpers change the TCP packet size, the highest seen sequence
number needs to be corrected. This is currently only done upwards, when
the packet size is reduced the sequence number is unchanged. This causes
TCP conntrack to falsely detect unacknowledged data and decrease the
timeout.

Fix by updating the highest seen sequence number in both directions after
packet mangling.

Tested-by: Krzysztof Piotr Oledzki <ole@ans.pl>
Signed-off-by: Patrick McHardy <kaber@trash.net>
include/net/netfilter/nf_conntrack.h
net/ipv4/netfilter/nf_nat_helper.c
net/netfilter/nf_conntrack_proto_tcp.c