netfilter: nf_flow_table: tear down TCP flows if RST or FIN was seen
authorFelix Fietkau <nbd@nbd.name>
Mon, 26 Feb 2018 09:15:24 +0000 (10:15 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 24 Apr 2018 08:29:02 +0000 (10:29 +0200)
commitb6f27d322a0a7b588fe6369fa5fa87bd7c553bd3
tree9178d3d5a41490f6775a2cd5bb7401bd6484a8dc
parentda5984e51063a2c8723a36c29f090e03b3ff2a35
netfilter: nf_flow_table: tear down TCP flows if RST or FIN was seen

Allow the slow path to handle the shutdown of the connection with proper
timeouts. The packet containing RST/FIN is also sent to the slow path
and the TCP conntrack module will update its state.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_ip.c