• KOVACS Krisztian's avatar
    tcp: Handle TCP SYN+ACK/ACK/RST transparency · 88ef4a5a
    KOVACS Krisztian authored
    The TCP stack sends out SYN+ACK/ACK/RST reply packets in response to
    incoming packets. The non-local source address check on output bites
    us again, as replies for transparently redirected traffic won't have a
    chance to leave the node.
    
    This patch selectively sets the FLOWI_FLAG_ANYSRC flag when doing the
    route lookup for those replies. Transparent replies are enabled if the
    listening socket has the transparent socket flag set.
    Signed-off-by: default avatarKOVACS Krisztian <hidden@sch.bme.hu>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    88ef4a5a
tcp_ipv4.c 60.5 KB