From mboxrd@z Thu Jan 1 00:00:00 1970 From: Joel Gerber Subject: RE: Why SYN-ACK packets are dropped as INVALID? Date: Thu, 26 Mar 2015 16:09:54 -0300 Message-ID: <405CDB4498600447A16CCC4ED3BFCAD301BE5613F5@SCOOBY.corp.eastlink.ca> References: <201503260853.07382.neal.p.murphy@alum.wpi.edu> <405CDB4498600447A16CCC4ED3BFCAD301BE4C46C3@SCOOBY.corp.eastlink.ca> Mime-Version: 1.0 Content-Transfer-Encoding: base64 Return-path: In-reply-to: Content-language: en-US Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="utf-8" To: "Spenst, Aleksej" Cc: "netfilter@vger.kernel.org" SSB3b3VsZCBwcm9iYWJseSBoYXZlIHRvIHNlZSBhIHBhY2tldCBjYXB0dXJlICh0Y3BkdW1wL3Rz aGFyay9kdW1wY2FwKSBzdGFydGluZyBmcm9tIHRoZSBpbml0aWFsIFNZTiB0byB0aGUgImludmFs aWQiIHNlZ21lbnQgdG8gZ2l2ZSBtdWNoIG1vcmUgaGVscC4NCg0KSm9lbCBHZXJiZXINCk5ldHdv cmsgT3BlcmF0aW9ucyBTcGVjaWFsaXN0IC0gVGVsZXBob25lDQpUZWxlcGhvbmUNCkVhc3RsaW5r DQpKb2VsLkdlcmJlckBjb3JwLmVhc3RsaW5rLmNhICAgIFQ6IDUxOS43ODYuMTI0MQ0KDQotLS0t LU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogU3BlbnN0LCBBbGVrc2VqIFttYWlsdG86QWxl a3Nlai5TcGVuc3RAaGFybWFuLmNvbV0gDQpTZW50OiBNYXJjaC0yNi0xNSAxMjoxNSBQTQ0KVG86 IG5ldGZpbHRlckB2Z2VyLmtlcm5lbC5vcmc7IEpvZWwgR2VyYmVyOyBuZWFsLnAubXVycGh5QGFs dW0ud3BpLmVkdQ0KU3ViamVjdDogQVc6IFdoeSBTWU4tQUNLIHBhY2tldHMgYXJlIGRyb3BwZWQg YXMgSU5WQUxJRD8NCg0KVGhhbmsgeW91LiBTbywgdGhlIEFDSyBudW1iZXIgaXMgY29ycmVjdC4g V2h5IGlzIHRoZW4gdGhlIHBhY2tldCBpbnZhbGlkPw0KDQotLS0tLVVyc3Byw7xuZ2xpY2hlIE5h Y2hyaWNodC0tLS0tDQpWb246IEpvZWwgR2VyYmVyIFttYWlsdG86Sm9lbC5HZXJiZXJAY29ycC5l YXN0bGluay5jYV0NCkdlc2VuZGV0OiBEb25uZXJzdGFnLCAyNi4gTcOkcnogMjAxNSAxNDoyOA0K QW46IFNwZW5zdCwgQWxla3NlajsgbmVhbC5wLm11cnBoeUBhbHVtLndwaS5lZHUNCkNjOiBuZXRm aWx0ZXJAdmdlci5rZXJuZWwub3JnDQpCZXRyZWZmOiBSRTogV2h5IFNZTi1BQ0sgcGFja2V0cyBh cmUgZHJvcHBlZCBhcyBJTlZBTElEPw0KDQpUaGUgQUNLIG51bWJlciByZWZsZWN0cyB0aGUgYnl0 ZXMgdGhhdCB5b3UgaGF2ZSBwcm9jZXNzZWQgZnJvbSB0aGUgcmVtb3RlIGVuZC4gV2hlbiB5b3Ug aGF2ZSBhIFRDUCAic2lnbmFsaW5nIiBkYXRhZ3JhbSwgd2hpY2ggY29udGFpbnMgbm8gYWN0dWFs IHVzZXIgZGF0YSwgeW91IHdpbGwgYWx3YXlzIGFkZCAxIHRvIHRoZSBzZXF1ZW5jZSBudW1iZXIg b2YgdGhlIHJlY2VpdmVkIHBhY2tldCB3aGVuIHBlcmZvcm1pbmcgYW4gQUNLLg0KDQpKb2VsIEdl cmJlcg0KTmV0d29yayBPcGVyYXRpb25zIFNwZWNpYWxpc3QgLSBUZWxlcGhvbmUgVGVsZXBob25l IEVhc3RsaW5rDQpKb2VsLkdlcmJlckBjb3JwLmVhc3RsaW5rLmNhICAgIFQ6IDUxOS43ODYuMTI0 MQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogbmV0ZmlsdGVyLW93bmVyQHZn ZXIua2VybmVsLm9yZyBbbWFpbHRvOm5ldGZpbHRlci1vd25lckB2Z2VyLmtlcm5lbC5vcmddIE9u IEJlaGFsZiBPZiBTcGVuc3QsIEFsZWtzZWoNClNlbnQ6IE1hcmNoLTI2LTE1IDk6MjUgQU0NClRv OiBuZWFsLnAubXVycGh5QGFsdW0ud3BpLmVkdTsgbmV0ZmlsdGVyQHZnZXIua2VybmVsLm9yZw0K U3ViamVjdDogQVc6IFdoeSBTWU4tQUNLIHBhY2tldHMgYXJlIGRyb3BwZWQgYXMgSU5WQUxJRD8N Cg0KSGkgTmVhbCwNCg0KSXMgdGhpcyBjb25maWd1cmFibGU/IEkgdGhvdWdodCB0aGUgQUNLIG51 bWJlciBpcyBhbHdheXMgMSBncmVhdGVyIHRoYW4gdGhlIHNlcXVlbmNlIG51bWJlciBvZiB0aGUg U1lOIHBhY2tldC4gU28sIGluIG15IGNhc2UgdGhlIEFDSyBzaG93cyB0aGUgc2VxdWVuY2UgbnVt YmVyIG9mIHRoZSBuZXh0IHBhY2tldCB0aGUgaG9zdCBleHBlY3RzIHRvIHJlY2VpdmUuIEkgc2Vl IHRoaXMgaW4gdGNwZHVtcCBsb2dzIHdoZW4gZXZlcnl0aGluZyB3b3JrcyBmaW5lICh0aGUgZGVz Y3JpYmVkIHByb2JsZW0gaGFwcGVucyBvbmx5IHNvbWV0aW1lcykuDQoNCkNhbiBpdCBiZSB0aGF0 IG15IHN5c3RlbSBzb21ldGltZXMgc3VkZGVubHkgZXhwZWN0cyB0aGF0IHRoZSBBQ0sgc2hvd3Mg dGhlIGxhc3QgcGFja2V0IHRoZSBob3N0IHJlY2VpdmVkIChpbnN0ZWFkIG9mIHRoZSBuZXh0KT8g DQoNClRoYW5rIHlvdSwNCkFsZWtzZWouDQoNCg0KLS0tLS1VcnNwcsO8bmdsaWNoZSBOYWNocmlj aHQtLS0tLQ0KVm9uOiBuZXRmaWx0ZXItb3duZXJAdmdlci5rZXJuZWwub3JnIFttYWlsdG86bmV0 ZmlsdGVyLW93bmVyQHZnZXIua2VybmVsLm9yZ10gSW0gQXVmdHJhZyB2b24gTmVhbCBNdXJwaHkN Ckdlc2VuZGV0OiBEb25uZXJzdGFnLCAyNi4gTcOkcnogMjAxNSAxMzo1Mw0KQW46IG5ldGZpbHRl ckB2Z2VyLmtlcm5lbC5vcmcNCkJldHJlZmY6IFJlOiBXaHkgU1lOLUFDSyBwYWNrZXRzIGFyZSBk cm9wcGVkIGFzIElOVkFMSUQ/DQoNCk9uIFRodXJzZGF5LCBNYXJjaCAyNiwgMjAxNSAwNDo0MToy MSBBTSBTcGVuc3QsIEFsZWtzZWogd3JvdGU6DQo+IEhpIEFsbCwNCj4gDQo+IEnigJltIHNlbmRp bmcgVENQIFNZTiBwYWNrZXRzIHRvIHRoZSBzZXJ2ZXIuIFRoZSBwcm9ibGVtIGlzIHRoYXQgdGhl IA0KPiBTWU4tQUNLIHBhY2tldHMgY29taW5nIGZyb20gdGhlIHNlcnZlciBpbiByZXNwb25zZSBh cmUgc29tZXRpbWVzIA0KPiBkcm9wcGVkIGJ5IG15IGZpcmV3YWxsIChpcHRhYmxlcykgYXMgSU5W QUxJRC4gSSBjYW7igJl0IGZpZ3VyZSBvdXQgd2h5IA0KPiB0aGUgZmlyZXdhbGwgc2VlcyB0aGVz ZSBwYWNrZXRzIGludmFsaWQuIFRoZXkgc2VlbSB0byBiZSBPay4gV2hhdCANCj4gcGFyYW1ldGVy cyBhcmUgdGFrZW4gaW50byBhY2NvdW50IGJ5IHRoZSBmaXJld2FsbCB3aGVuIG1ha2luZyBhIA0K PiBkZWNpc2lvbiBhYm91dCBpbnZhbGlkaXR5IG9mIGEgcGFja2V0Pw0KPiANCj4gRXhhbXBsZSBm cm9tIHRjcGR1bXA6DQo+IA0KPiAxOToyOToyMi4wNDUxMDYgIDxteSBJUD4gICAgICA8U2VydmVy IElQPiAgVENQICA2MDcxMOKGkjgwODAgW1NZTl0NCj4gU2VxPTI2NDYxOTQ5MzYgV2luPTE0NjAw IExlbj0wIE1TUz0xNDYwIFNBQ0tfUEVSTT0xIFRTdmFsPTEzNTY5MjAgVFNlY3I9MA0KPiBXUz0x NiAxOToyOToyMi44MTc4NTkgIDxTZXJ2ZXIgSVA+ICA8bXkgSVA+ICAgICAgVENQICA4MDgw4oaS NjA3MTAgW1NZTiwNCj4gQUNLXSBTZXE9MzkyMDg1NjIzMyBBY2s9MjY0NjE5NDkzNyBXaW49NjU1 MzUgTGVuPTAgTVNTPTEyMDANCj4gU0FDS19QRVJNPTENCj4gDQo+IFRoZSBBQ0sgc2VxdWVuY2Ug bnVtYmVyIChBY2s9MjY0NjE5NDkzNykgaXMgT0ssIGJ1dCBJIHNlZSBpbiBteSANCj4gaXB0YWJs ZXMgbG9ncyB0aGF0IHRoaXMgU1lOLUFDSyBwYWNrZXQgaXMgbWFya2VkIGFzIElOVkFMSUQgYW5k IA0KPiBkcm9wcGVkLiBXaGVuIHRoZSBTWU4tQUNLIHBhY2tldCBjb21lcyB0aGUgVENQIHNlc3Np b24gaXMgaW4gdGhlIHN0YXRlIA0KPiBTWU5fU0VOVCAtPiBTbywgdGhlIHN0YXRlcyBhcmUgYWxz byBPSy4gV2h5IGlzIHRoaXMgcGFja2V0IGludmFsaWQgdGhlbj8NCg0KRG9lcyB0aGUgQUNLIHRl bGwgdGhlIHBlZXIgdGhlIHNlcXVlbmNlICMgb2YgdGhlICpuZXh0KiBwYWNrZXQgdGhlIGhvc3Qg ZXhwZWN0cyB0byByZWNlaXZlPyBPciBkb2VzIGl0IGFja25vd2xlZGdlIHRoZSAqbGFzdCogcGFj a2V0IGl0IHJlY2VpdmVkPyBJZiB0aGUgbGF0dGVyLCB0aGVuIHRoZSBTWU4tQUNLIGFzIHNlbnQg aXMgaW52YWxpZCwgYXMgaXQgYWNrbm93bGVkZ2VzIGEgcGFja2V0IHRoYXQgaGFzbid0IGJlZW4g c2VudCB5ZXQuDQotLQ0KVG8gdW5zdWJzY3JpYmUgZnJvbSB0aGlzIGxpc3Q6IHNlbmQgdGhlIGxp bmUgInVuc3Vic2NyaWJlIG5ldGZpbHRlciIgaW4gdGhlIGJvZHkgb2YgYSBtZXNzYWdlIHRvIG1h am9yZG9tb0B2Z2VyLmtlcm5lbC5vcmcgTW9yZSBtYWpvcmRvbW8gaW5mbyBhdCAgaHR0cDovL3Zn ZXIua2VybmVsLm9yZy9tYWpvcmRvbW8taW5mby5odG1sDQpOICAgICByICB5ICAgYiBYICDHp3Yg XiAp3rp7Lm4gKyAgIHogINerIHtheSAdyofamSAsaiAgIGYgICBoICAgeiAeIHcgICAgICAgajor diAgIHcgaiBtICAgICAgICAgelorICAgICDdomoiICAhIGkNCg==