[IPV4] Send TCP reset through dst_output in ipt

To:	"David S. Miller" <davem@xxxxxxxxxxxxx>
Subject:	[IPV4] Send TCP reset through dst_output in ipt_REJECT
From:	Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Date:	Thu, 17 Mar 2005 21:51:45 +1100
Cc:	Patrick McHardy <kaber@xxxxxxxxx>, kuznet@xxxxxxxxxxxxx, yoshfuji@xxxxxxxxxxxxxx, netdev@xxxxxxxxxxx
In-reply-to:	<20050316144424.689d5981.davem@xxxxxxxxxxxxx>
References:	<20050315091904.GA6256@xxxxxxxxxxxxxxxxxxx> <20050315095837.GA7130@xxxxxxxxxxxxxxxxxxx> <20050315100522.GA7275@xxxxxxxxxxxxxxxxxxx> <20050315102450.0f3f1618.davem@xxxxxxxxxxxxx> <42373142.6090902@xxxxxxxxx> <20050315204006.GB22349@xxxxxxxxxxxxxxxxxxx> <42374A35.6020308@xxxxxxxxx> <20050316105100.GA8404@xxxxxxxxxxxxxxxxxxx> <42388263.3090602@xxxxxxxxx> <20050316144424.689d5981.davem@xxxxxxxxxxxxx>
Sender:	netdev-bounce@xxxxxxxxxxx
User-agent:	Mutt/1.5.6+20040907i

Hi Dave:

I noticed that the TCP reset code in ipt_REJECT didn't call dst_output
either so it also bypasses IPsec processing.  Here is a patch to fix
that and use the correct MTU value.

Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

xfrm-20
Description: Text document

<Prev in Thread]	Current Thread	[Next in Thread>
*[15/] [INET] Fix IPsec calculation in ip_append_data/ip6_append_data*, (continued)* *[15/] [INET] Fix IPsec calculation in ip_append_data/ip6_append_data*, Herbert Xu* *[16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu* *[17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu* *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, David S. Miller* *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Patrick McHardy* Replace send_unreach with icmp_send, Herbert Xu Re: Replace send_unreach with icmp_send, Patrick McHardy [IPV4] Make ipt_REJECT use icmp_send again, Herbert Xu Re: [IPV4] Make ipt_REJECT use icmp_send again, Patrick McHardy Re: [IPV4] Make ipt_REJECT use icmp_send again, David S. Miller [IPV4] Send TCP reset through dst_output in ipt_REJECT, Herbert Xu <= Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT, David S. Miller *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Lennert Buytenhek* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, David S. Miller* *[21/] [IPv4] Fix MTU check in ipmr_queue_xmit*, Herbert Xu* *[22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Herbert Xu* *[23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, Herbert Xu* *[24/] [IPSEC] Get ttl from child instead of path*, Herbert Xu* *[25/] [NET] Kill unnecessary uses of dst_path_metric*, Herbert Xu*

Previous by Date:	Re: [PATCH] net, ipv6: remove redundant NULL checks before kfree in ip6_flowlabel.c, Jesper Juhl
Next by Date:	Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT, David S. Miller
Previous by Thread:	Re: [IPV4] Make ipt_REJECT use icmp_send again, David S. Miller
Next by Thread:	Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT, David S. Miller
Indexes:	[Date] [Thread] [Top] [All Lists]

[IPV4] Send TCP reset through dst_output in ipt_REJECT