ALT Linux Team development discussions
 help / color / mirror / Atom feed
* [devel] [PATCH net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
  @ 2017-04-04  4:44 ` Alexei Takaseev
  2017-04-04 11:32   ` Dmitry V. Levin
  0 siblings, 1 reply; 2+ messages in thread
From: Alexei Takaseev @ 2017-04-04  4:44 UTC (permalink / raw)
  To: ALT Linux Team development discussions

Добрый день!

Возможно ли добавить в наши ядра вот этот патч:

http://marc.info/?l=linux-netdev&m=149124211620174&w=2

очень уж неприятную багу для NAT и BRAS он фиксит. По сути
удаленный DoS.

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [devel] [PATCH net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
  2017-04-04  4:44 ` [devel] [PATCH net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff Alexei Takaseev
@ 2017-04-04 11:32   ` Dmitry V. Levin
  0 siblings, 0 replies; 2+ messages in thread
From: Dmitry V. Levin @ 2017-04-04 11:32 UTC (permalink / raw)
  To: ALT Devel discussion list

[-- Attachment #1: Type: text/plain, Size: 411 bytes --]

Hi,

On Tue, Apr 04, 2017 at 01:44:21PM +0900, Alexei Takaseev wrote:
> Добрый день!
> 
> Возможно ли добавить в наши ядра вот этот патч:
> 
> http://marc.info/?l=linux-netdev&m=149124211620174&w=2
> 
> очень уж неприятную багу для NAT и BRAS он фиксит. По сути
> удаленный DoS.

Давайте подождём, когда его отревьюят и смержат.
Это не первая версия фикса и, возможно, не последняя.


-- 
ldv

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2017-04-04 11:32 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-04-04  4:44 ` [devel] [PATCH net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff Alexei Takaseev
2017-04-04 11:32   ` Dmitry V. Levin

ALT Linux Team development discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
		devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
	public-inbox-index devel

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.devel


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git