Re: linux kernel TCP, network connections and iptables

[Alan Cox]

>   should we just eat it and shut up (because that's the way TCP works and it
>   will not change)?

It is part of the protocol requirement

>   I haven't used iptables yet but I think they can handle packets with various
>   bits sets (including RST), unlike ipfw. But, is there any way with iptables
>   to know if a port is "used" or "unused" at any time? And if yes, at what
>   state (listening, at the middle of a 3-way TCP handshaking etc) also?

Another very simple approach is to add the following to the top of the tcp
code that sends resets in the kernel


        
        static unsigned long last_time;

        if(jiffies-last_time < HZ/10)
                return;
        last_time = jiffies;

which will then limit to one RST per 10th sec


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/