netfilter: xt_TCPMSS: SYN packets are allowed to contain data
authorSimon Arlott <simon@fire.lp0.eu>
Tue, 2 Feb 2010 14:33:38 +0000 (15:33 +0100)
committerPatrick McHardy <kaber@trash.net>
Tue, 2 Feb 2010 14:33:38 +0000 (15:33 +0100)
commit10a199394b8f9b4c4e0be6e14a61109a7d891b1b
treef10aa04cacd465e0a8120dcf8afa43441dad6ab6
parentc30f540b63047437ffa894b5353216410c480d1a
netfilter: xt_TCPMSS: SYN packets are allowed to contain data

The TCPMSS target is dropping SYN packets where:
  1) There is data, or
  2) The data offset makes the TCP header larger than the packet.

Both of these result in an error level printk. This printk has been
removed.

This change avoids dropping SYN packets containing data. If there
is also no MSS option (as well as data), one will not be added
because of possible complications due to the increased packet size.

Signed-off-by: Simon Arlott <simon@fire.lp0.eu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
net/netfilter/xt_TCPMSS.c