ソースを参照

[tcp] Do not send RST for unrecognised connections

On large networks with substantial numbers of monitoring agents,
unwanted TCP connection attempts may end up flooding iPXE's ARP cache.

Fix by silently dropping packets received for unrecognised TCP
connections.  This should not cause problems, since many firewalls
will also silently drop any such packets.

Reported-by: Jarrod Johnson <jarrod.b.johnson@gmail.com>
Signed-off-by: Michael Brown <mcb30@ipxe.org>
tags/v1.20.1
Michael Brown 11年前
コミット
18d0818f94
1個のファイルの変更0行の追加1行の削除
  1. 0
    1
      src/net/tcp.c

+ 0
- 1
src/net/tcp.c ファイルの表示

@@ -1218,7 +1218,6 @@ static int tcp_rx ( struct io_buffer *iobuf,
1218 1218
 
1219 1219
 	/* If no connection was found, send RST */
1220 1220
 	if ( ! tcp ) {
1221
-		tcp_xmit_reset ( tcp, st_src, tcphdr );
1222 1221
 		rc = -ENOTCONN;
1223 1222
 		goto discard;
1224 1223
 	}

読み込み中…
キャンセル
保存