Skip to content
Commit 10a19939 authored by Simon Arlott's avatar Simon Arlott Committed by Patrick McHardy
Browse files

netfilter: xt_TCPMSS: SYN packets are allowed to contain data



The TCPMSS target is dropping SYN packets where:
  1) There is data, or
  2) The data offset makes the TCP header larger than the packet.

Both of these result in an error level printk. This printk has been
removed.

This change avoids dropping SYN packets containing data. If there
is also no MSS option (as well as data), one will not be added
because of possible complications due to the increased packet size.

Signed-off-by: default avatarSimon Arlott <simon@fire.lp0.eu>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent c30f540b
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment