Commit 8b580147 authored by Eric Dumazet's avatar Eric Dumazet Committed by David S. Miller
Browse files

netfilter: tproxy: prepare TCP_NEW_SYN_RECV support 



TCP request socks soon will be visible in ehash table.

Signed-off-by: default avatarEric Dumazet <edumazet@google.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent a8399231

net/netfilter/xt_TPROXY.c

+12 −6
Original line number Diff line number Diff line
@@ -42,15 +42,21 @@ enum nf_tproxy_lookup_t { 


static bool tproxy_sk_is_transparent(struct sock *sk)

{

	if (sk->sk_state != TCP_TIME_WAIT) {

		if (inet_sk(sk)->transparent)

			return true;

		sock_put(sk);

	} else {

	switch (sk->sk_state) {

	case TCP_TIME_WAIT:

		if (inet_twsk(sk)->tw_transparent)

			return true;

		inet_twsk_put(inet_twsk(sk));

		break;

	case TCP_NEW_SYN_RECV:

		if (inet_rsk(inet_reqsk(sk))->no_srccheck)

			return true;

		break;

	default:

		if (inet_sk(sk)->transparent)

			return true;

	}



	sock_gen_put(sk);

	return false;

}