Re: [PATCH] Make netfilter handle SACK in NAT'ed connections (was Re: Fw: oops/bug in tcp, SACK doesn't work?)

[Harald Welte <laforge@xxxxxxxxxxxx>]

On Sun, Jan 27, 2002 at 04:20:36AM -0800, Chris Wedgwood wrote:
> On Sun, Jan 27, 2002 at 09:57:16AM +0100, Harald Welte wrote:
> 
>     Hi Alexey & Others.
> 
>     I'm now following up a very old thread about netfilter deleting
>     SACKPERM in the case of NAT'ing protocols with helpers (ftp, irc, ...)
> 
> Why not just strip SACK when using NAT?

because SACK is generally a very useful extension of the TCP protocol,
and we shouldn't just be arrogant and decide that our users are not
allowed to use it in combination of nat.

>   --cw

-- 
Live long and prosper
- Harald Welte / laforge@xxxxxxxxxxxx               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- 
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)