summaryrefslogtreecommitdiff
path: root/net/lapb
diff options
context:
space:
mode:
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>2005-12-01 14:28:58 -0800
committerDavid S. Miller <davem@davemloft.net>2005-12-01 14:28:58 -0800
commit73f306024c15bd12e59677d6eaf43ecced614f04 (patch)
tree88d89bf7d54d51df8bd229ed9384e42f4064245a /net/lapb
parent5666c0947ede0432ba5148570aa66ffb9febff5b (diff)
[NETFILTER]: Ignore ACKs ACKs on half open connections in TCP conntrack
Mounting NFS file systems after a (warm) reboot could take a long time if firewalling and connection tracking was enabled. The reason is that the NFS clients tends to use the same ports (800 and counting down). Now on reboot, the server would still have a TCB for an existing TCP connection client:800 -> server:2049. The client sends a SYN from port 800 to server:2049, which elicits an ACK from the server. The firewall on the client drops the ACK because (from its point of view) the connection is still in half-open state, and it expects to see a SYNACK. The client will eventually time out after several minutes. The following patch corrects this, by accepting ACKs on half open connections as well. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/lapb')
0 files changed, 0 insertions, 0 deletions