diff options
| author | Florian Westphal <fw@strlen.de> | 2021-06-24 12:36:41 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-07-02 02:05:59 +0200 |
| commit | 37d220b58d52d6da88b928e11bffd83f88c6ac79 (patch) | |
| tree | a5f08597cfca3fc37f7704bf713dcc56b2482250 /net/netfilter | |
| parent | 5140aaa4604ba96685dc04b4d2dde3384bbaecef (diff) | |
| download | lwn-37d220b58d52d6da88b928e11bffd83f88c6ac79.tar.gz lwn-37d220b58d52d6da88b928e11bffd83f88c6ac79.zip | |
selftest: netfilter: add test case for unreplied tcp connections
TCP connections in UNREPLIED state (only SYN seen) can be kept alive
indefinitely, as each SYN re-sets the timeout.
This means that even if a peer has closed its socket the entry
never times out.
This also prevents re-evaluation of configured NAT rules.
Add a test case that sets SYN timeout to 10 seconds, then check
that the nat redirection added later eventually takes effect.
This is based off a repro script from Antonio Ojea.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter')
0 files changed, 0 insertions, 0 deletions