Handle the closing of half connections where we don't see the full

bidirectional FIN/ACK+ACK handshake.

ok henning@

1 files changed, 10 insertions, 1 deletions

diff --git a/sys/net/pf.c b/sys/net/pf.c
index 3fd065b102a..6a3ed2a8ed8 100644
--- a/sys/net/pf.c
+++ b/sys/net/pf.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: pf.c,v 1.588 2008/06/10 22:39:31 mcbride Exp $ */
+/*	$OpenBSD: pf.c,v 1.589 2008/06/10 22:59:13 reyk Exp $ */
 
 /*
  * Copyright (c) 2001 Daniel Hartmeier
@@ -4013,6 +4013,15 @@ pf_tcp_track_sloppy(struct pf_state_peer *src, struct pf_state_peer *dst,
 				REASON_SET(reason, PFRES_SRCLIMIT);
 				return (PF_DROP);
 			}
+		} else if (src->state == TCPS_CLOSING &&
+		    dst->state == TCPS_ESTABLISHED &&
+		    dst->seqlo == 0) {
+			/*
+			 * Handle the closing of half connections where we
+			 * don't see the full bidirectional FIN/ACK+ACK
+			 * handshake.
+			 */
+			dst->state = TCPS_CLOSING;
 		}
 	}
 	if (th->th_flags & TH_RST)