浏览代码

[tcp] Do not send RST for unrecognised connections

On large networks with substantial numbers of monitoring agents,
unwanted TCP connection attempts may end up flooding iPXE's ARP cache.

Fix by silently dropping packets received for unrecognised TCP
connections.  This should not cause problems, since many firewalls
will also silently drop any such packets.

Reported-by: Jarrod Johnson <jarrod.b.johnson@gmail.com>
Signed-off-by: Michael Brown <mcb30@ipxe.org>
tags/v1.20.1
Michael Brown 12 年前
父节点
当前提交
18d0818f94
共有 1 个文件被更改,包括 0 次插入1 次删除
  1. 0
    1
      src/net/tcp.c

+ 0
- 1
src/net/tcp.c 查看文件

1218
 
1218
 
1219
 	/* If no connection was found, send RST */
1219
 	/* If no connection was found, send RST */
1220
 	if ( ! tcp ) {
1220
 	if ( ! tcp ) {
1221
-		tcp_xmit_reset ( tcp, st_src, tcphdr );
1222
 		rc = -ENOTCONN;
1221
 		rc = -ENOTCONN;
1223
 		goto discard;
1222
 		goto discard;
1224
 	}
1223
 	}

正在加载...
取消
保存