[Bug 197484] pf 3whs ACK handling

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197484

            Bug ID: 197484
           Summary: pf 3whs ACK handling
           Product: Base System
           Version: 10.1-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: krichy at cflinux.hu

Created attachment 152799
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=152799&action=edit
the fix

pf synproxy will do the 3WHS on behalf of the target machine, and once
the 3WHS is completed, establish the backend connection. The trigger
for "3WHS completed" is the reception of the first ACK. However, we
should not proceed if that ACK also has RST or FIN set.

reference:
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c?rev=1.901&content-type=text/x-cvsweb-markup

-- 
You are receiving this mail because:
You are the assignee for the bug.