summaryrefslogtreecommitdiffstats
path: root/extensions
diff options
context:
space:
mode:
authorYasuyuki KOZAKAI <yasuyuki@netfilter.org>2007-07-16 10:07:30 +0000
committerYasuyuki KOZAKAI <yasuyuki@netfilter.org>2007-07-16 10:07:30 +0000
commita70d29f15c809d02cb271eddba1f217d78853372 (patch)
tree83f0e2d068bfb0542ba43f8ada05a037ef99ec86 /extensions
parent561e90ea9d32393a62262978b00816b92f06acbf (diff)
Adds missing FIN to mask part generated by '--syn' of libip6t_tcp
Diffstat (limited to 'extensions')
-rw-r--r--extensions/libip6t_tcp.c2
-rw-r--r--extensions/libip6t_tcp.man2
2 files changed, 2 insertions, 2 deletions
diff --git a/extensions/libip6t_tcp.c b/extensions/libip6t_tcp.c
index 734387c4..c2a84e14 100644
--- a/extensions/libip6t_tcp.c
+++ b/extensions/libip6t_tcp.c
@@ -181,7 +181,7 @@ parse(int c, char **argv, int invert, unsigned int *flags,
exit_error(PARAMETER_PROBLEM,
"Only one of `--syn' or `--tcp-flags' "
" allowed");
- parse_tcp_flags(tcpinfo, "SYN,RST,ACK", "SYN", invert);
+ parse_tcp_flags(tcpinfo, "SYN,RST,ACK,FIN", "SYN", invert);
*flags |= TCP_FLAGS;
break;
diff --git a/extensions/libip6t_tcp.man b/extensions/libip6t_tcp.man
index e94566cf..31cc493d 100644
--- a/extensions/libip6t_tcp.man
+++ b/extensions/libip6t_tcp.man
@@ -37,7 +37,7 @@ cleared. Such packets are used to request TCP connection initiation;
for example, blocking such packets coming in an interface will prevent
incoming TCP connections, but outgoing TCP connections will be
unaffected.
-It is equivalent to \fB--tcp-flags SYN,RST,ACK SYN\fP.
+It is equivalent to \fB--tcp-flags SYN,RST,ACK,FIN SYN\fP.
If the "!" flag precedes the "--syn", the sense of the
option is inverted.
.TP