Re: [IPV4] Send TCP reset through dst_output in ipt

To:	Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Subject:	Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT
From:	"David S. Miller" <davem@xxxxxxxxxxxxx>
Date:	Thu, 17 Mar 2005 10:06:47 -0800
Cc:	kaber@xxxxxxxxx, kuznet@xxxxxxxxxxxxx, yoshfuji@xxxxxxxxxxxxxx, netdev@xxxxxxxxxxx
In-reply-to:	<20050317105145.GA20089@gondor.apana.org.au>
References:	<20050315091904.GA6256@gondor.apana.org.au> <20050315095837.GA7130@gondor.apana.org.au> <20050315100522.GA7275@gondor.apana.org.au> <20050315102450.0f3f1618.davem@davemloft.net> <42373142.6090902@trash.net> <20050315204006.GB22349@gondor.apana.org.au> <42374A35.6020308@trash.net> <20050316105100.GA8404@gondor.apana.org.au> <42388263.3090602@trash.net> <20050316144424.689d5981.davem@davemloft.net> <20050317105145.GA20089@gondor.apana.org.au>
Sender:	netdev-bounce@xxxxxxxxxxx

On Thu, 17 Mar 2005 21:51:45 +1100
Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote:

> I noticed that the TCP reset code in ipt_REJECT didn't call dst_output
> either so it also bypasses IPsec processing.  Here is a patch to fix
> that and use the correct MTU value.
> 
> Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

Applied, thanks a lot Herbert.

<Prev in Thread]	Current Thread	[Next in Thread>
*[16/] [INET] Take IPsec overhead into account in tunnels*, (continued)* *[16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu* *[17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu* *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, David S. Miller* *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Patrick McHardy* Replace send_unreach with icmp_send, Herbert Xu Re: Replace send_unreach with icmp_send, Patrick McHardy [IPV4] Make ipt_REJECT use icmp_send again, Herbert Xu Re: [IPV4] Make ipt_REJECT use icmp_send again, Patrick McHardy Re: [IPV4] Make ipt_REJECT use icmp_send again, David S. Miller [IPV4] Send TCP reset through dst_output in ipt_REJECT, Herbert Xu Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT, David S. Miller <= *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Lennert Buytenhek* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, David S. Miller* *[21/] [IPv4] Fix MTU check in ipmr_queue_xmit*, Herbert Xu* *[22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Herbert Xu* *[23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, Herbert Xu* *[24/] [IPSEC] Get ttl from child instead of path*, Herbert Xu* *[25/] [NET] Kill unnecessary uses of dst_path_metric*, Herbert Xu* *[26/] [NET] Kill dst_pmtu/dst_path_metric*, Herbert Xu*

Previous by Date:	[IPV4] Send TCP reset through dst_output in ipt_REJECT, Herbert Xu
Next by Date:	[PATCH] [NET] Save space for sk_alloc_slab() failure message., YOSHIFUJI Hideaki / 吉藤英明
Previous by Thread:	[IPV4] Send TCP reset through dst_output in ipt_REJECT, Herbert Xu
Next by Thread:	*Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu*
Indexes:	[Date] [Thread] [Top] [All Lists]

Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT