linux-kernel - Re: Unexpected tcpv6 connection resets since linux 4.4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2277643.Q5Ry2PpJQt@proton>
Date:	Wed, 09 Mar 2016 20:12:34 +0100
From:	Andreas Messer <andi@...telmap.de>
To:	Cong Wang <xiyou.wangcong@...il.com>
Cc:	LKML <linux-kernel@...r.kernel.org>,
	Linux Kernel Network Developers <netdev@...r.kernel.org>
Subject: Re: Unexpected tcpv6 connection resets since linux 4.4

On Mon, Mar 7, 2016 at 15:58, Cong Wang <xiyou.wangcong@...il.com>wrote:
> On Sun, Mar 6, 2016 at 7:10 AM, Andreas Messer <andi@...telmap.de> wrote:
> > i have updated two of my machines in the last weeks to linux 4.4.1 and
> > linux 4.4.3. It seems that since then i get unexpected TCPv6 connection
> > resets when connecting to these machines remotely. The issue occurs with
> > sshd and with a http service. /etc/hosts.deny and /etc/hosts.allow are
> > empty on both server machines. I'm not so in IPv6 and have no idea whats
> > going on. Please find attached a network trace from one of the machines
> > when connecting with ssh (on port 23 for debugging).
> 
> Sounds like the problem fixed by the following commit:
> 
> commit 9cf7490360bf2c46a16b7525f899e4970c5fc144
> Author: Eric Dumazet <edumazet@...gle.com>
> Date:   Tue Feb 2 19:31:12 2016 -0800
> 
>     tcp: do not drop syn_recv on all icmp reports

Thanks for the tip. I applied the patch to V4,4,1 and it solved the problem.

Cheers,
Andreas

Download attachment "signature.asc" of type "application/pgp-signature" (182 bytes)