From: Dong Wei Date: Wed, 4 Jun 2008 16:57:51 +0000 (-0700) Subject: netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state X-Git-Tag: v2.6.26-rc5~1^2~19 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3;p=pandora-kernel.git netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state In xt_connlimit match module, the counter of an IP is decreased when the TCP packet is go through the chain with ip_conntrack state TW. Well, it's very natural that the server and client close the socket with FIN packet. But when the client/server close the socket with RST packet(using so_linger), the counter for this connection still exsit. The following patch can fix it which is based on linux-2.6.25.4 Signed-off-by: Dong Wei Acked-by: Jan Engelhardt Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller --- Reading git-diff-tree failed