Eric Dumazet
61f69dc4e4
tcp: implement RFC 5961 3.2
...
[ Upstream commit 282f23c6ee ]
Implement the RFC 5691 mitigation against Blind
Reset attack using RST bit.
Idea is to validate incoming RST sequence,
to match RCV.NXT value, instead of previouly accepted
window : (RCV.NXT <= SEG.SEQ < RCV.NXT+RCV.WND)
If sequence is in window but not an exact match, send
a "challenge ACK", so that the other part can resend an
RST with the appropriate sequence.
Add a new sysctl, tcp_challenge_ack_limit, to limit
number of challenge ACK sent per second.
Add a new SNMP counter to count number of challenge acks sent.
(netstat -s | grep TCPChallengeACK)
Signed-off-by: Eric Dumazet <edumazet@google.com >
Cc: Kiran Kumar Kella <kkiran@broadcom.com >
Signed-off-by: David S. Miller <davem@davemloft.net >
Signed-off-by: Ben Hutchings <ben@decadent.org.uk >
2013-01-16 01:13:25 +00:00
..
2011-12-13 14:59:42 -08:00
2011-06-15 21:52:50 -07:00
2011-08-03 11:15:59 -04:00
2011-07-25 12:43:28 -07:00
2011-09-27 18:08:04 +02:00
2011-11-04 12:01:48 -07:00
2011-11-16 09:21:49 +01:00
2011-09-27 18:08:04 +02:00
2012-12-06 11:20:08 +00:00
2011-08-08 18:55:59 +02:00
2012-01-12 11:29:17 -08:00
2011-10-31 20:21:22 +00:00
2012-09-19 15:04:31 +01:00
2011-11-21 20:36:26 -08:00
2011-08-24 16:01:24 -07:00
2012-12-06 11:20:15 +00:00
2011-10-26 16:32:13 -04:00
2011-08-24 10:12:38 +00:00
2011-12-01 08:28:53 -08:00
2011-09-27 18:08:04 +02:00
2011-03-22 11:43:51 +01:00
2013-01-03 03:32:48 +00:00
2012-09-19 15:05:02 +01:00
2011-06-07 16:06:01 +02:00
2011-03-31 11:26:23 -03:00
2011-10-27 08:44:20 +02:00
2011-09-12 11:50:56 -07:00
2011-06-13 13:43:05 +02:00
2011-07-25 23:06:24 -07:00
2011-06-13 13:43:05 +02:00
2011-11-04 12:01:47 -07:00
2011-11-04 12:01:48 -07:00
2011-08-03 14:25:21 -10:00
2011-03-31 11:26:23 -03:00
2011-03-31 11:26:23 -03:00
2011-07-21 10:34:52 -04:00
2013-01-16 01:13:25 +00:00
2011-09-27 18:08:04 +02:00
2011-11-28 22:14:45 +01:00
2011-03-31 11:26:23 -03:00
2011-05-13 16:31:00 -07:00
2011-05-23 13:01:00 -07:00
2011-11-02 16:07:02 -07:00
2011-09-28 21:38:28 -07:00
2011-07-24 10:48:22 +02:00
2011-08-14 12:03:58 +02:00
2011-10-28 16:44:18 -07:00
2011-09-27 18:08:04 +02:00
2011-11-15 12:13:44 -08:00
2012-08-10 00:24:36 +01:00
2011-09-27 18:08:04 +02:00
2011-10-31 17:30:53 -07:00
2011-03-23 11:36:45 -05:00
2011-03-31 11:26:23 -03:00
2011-09-27 18:08:04 +02:00
2011-10-31 17:30:44 -07:00
2012-01-12 11:29:34 -08:00
2011-07-14 17:57:09 -07:00
2011-09-23 23:31:12 -03:00
2012-10-17 03:49:30 +01:00
2011-10-26 18:09:12 +03:00
2011-03-31 11:26:23 -03:00
2011-11-05 21:25:16 +01:00
2011-08-16 08:04:08 -07:00
2011-09-26 16:18:41 -07:00
2011-08-13 18:34:03 -07:00
2011-05-26 17:12:34 -07:00
2011-09-27 18:08:04 +02:00
2011-05-25 08:39:21 -07:00
2011-07-11 16:48:38 -07:00
2011-11-04 12:01:47 -07:00
2011-03-31 11:26:23 -03:00
2011-03-31 11:26:23 -03:00
2011-07-26 16:49:45 -07:00
2011-11-02 16:07:02 -07:00
2011-07-27 20:33:48 +05:30
2011-05-23 15:14:11 -07:00
2011-03-27 19:46:59 -07:00
2011-04-07 11:14:49 -07:00
2011-03-31 11:26:23 -03:00
2011-08-13 18:34:03 -07:00
2012-11-16 16:46:46 +00:00
2011-04-28 16:12:47 -04:00
2012-05-31 00:43:30 +01:00
2011-09-21 19:45:34 +03:00
2011-03-23 20:44:18 +01:00
2011-05-25 08:39:45 -07:00
2011-03-31 11:26:23 -03:00
2011-09-27 18:08:04 +02:00
2011-12-09 08:08:14 -08:00
2011-06-15 21:52:50 -07:00
2011-05-28 17:03:29 +02:00
2011-06-13 13:43:05 +02:00
2011-06-13 13:43:05 +02:00
2011-07-28 11:31:48 +10:00
2011-09-27 18:08:04 +02:00
2011-09-27 18:08:04 +02:00
2011-11-07 07:54:42 +10:30
2011-10-13 12:49:17 +02:00
2011-06-15 21:52:50 -07:00
2011-08-13 18:34:03 -07:00
2011-07-24 10:03:05 -07:00
2011-09-27 18:08:04 +02:00
2011-03-31 11:26:23 -03:00
2011-07-11 12:45:04 -07:00
2011-03-30 12:02:05 +02:00
2012-08-10 00:24:35 +01:00
2011-07-25 20:57:17 -07:00
2011-08-13 18:34:03 -07:00
2011-08-13 18:34:02 -07:00
2011-05-23 15:14:11 -07:00
2011-03-31 13:40:42 +02:00