Re: linux kernel TCP, network connections and iptables

From: Alan Cox (alan@lxorguk.ukuu.org.uk)
Date: Thu Sep 07 2000 - 16:51:50 EST


> should we just eat it and shut up (because that's the way TCP works and it
> will not change)?

It is part of the protocol requirement

> I haven't used iptables yet but I think they can handle packets with various
> bits sets (including RST), unlike ipfw. But, is there any way with iptables
> to know if a port is "used" or "unused" at any time? And if yes, at what
> state (listening, at the middle of a 3-way TCP handshaking etc) also?

Another very simple approach is to add the following to the top of the tcp
code that sends resets in the kernel

        
        static unsigned long last_time;

        if(jiffies-last_time < HZ/10)
                return;
        last_time = jiffies;

which will then limit to one RST per 10th sec

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Thu Sep 07 2000 - 21:00:31 EST