diff options
| author | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2013-01-20 22:51:17 +0000 |
|---|---|---|
| committer | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2013-01-20 22:51:17 +0000 |
| commit | f8d2d1bc00a4e38b20e04a32364d436b07904801 (patch) | |
| tree | e4d7903ff7bd517fe079f15eebdda8e8dce0f56f /gnu | |
| parent | 79a60aa3a9cb8a9e44077937fb1ad6e876eac83a (diff) | |
Make pf TCP sequence number tracking less strict by one octet for
FIN packets. The data of a TCP packet must fit into the announced
window, but this is not required for the sequence number of the
FIN. A packet with the FIN bit set and containing data that fits
exactly into the announced window was blocked. Our stack generates
such packets when the receive buffer size is set to 1024. Now pf
uses only the data lenght for window comparison.
OK henning@
Diffstat (limited to 'gnu')
0 files changed, 0 insertions, 0 deletions