Jan Rafaj b132101b63
pknock: check interknock time only for !ST_ALLOWED peers ...
Fixes a bug whereby an ST_ALLOWED peer existing for a time greater
than gc_expir_time would be gc-deleted, because both
!has_logged_during_this_minute(peer) and
is_interknock_time_exceeded(peer, rule->max_time) would be satisfied
for ST_ALLOWED hosts.
We also no longer test for !has_logged_during_this_minute(peer) in
peer_gc(), since there is really no need for this: the anti-spoof
minute check is performed (and subsequent remove_peer(peer) called if
needed) for each passing UDP-mode peer with expired autoclose in
pknock_mt(), given that --autoclose has been specified. If autoclose
has not been set, it will be subject to reset_knock_status(peer)
called from knock_mt() upon receiving the first closing secret - so it
is still guaranteed to disappear at the closest opportunity.
Signed-off-by: Jan Rafaj <jr+netfilter-devel@cedric.unob.cz >
2009-10-12 17:21:32 +02:00
2009-09-26 00:13:15 +02:00
2009-09-26 00:13:15 +02:00
2009-10-12 17:21:32 +02:00
2009-09-26 00:13:15 +02:00
2008-01-29 15:40:57 +01:00
2009-04-11 00:35:58 +02:00
2009-07-02 01:51:40 +02:00
2009-04-30 20:35:48 +02:00
2009-04-30 20:35:48 +02:00
2009-04-30 20:35:48 +02:00
2009-05-15 18:35:53 +02:00
2009-05-15 18:35:53 +02:00
2009-10-09 17:50:05 +02:00
2009-03-19 11:05:26 +01:00
2009-03-05 01:43:29 +01:00
2009-05-14 21:42:05 +02:00
2008-04-08 11:58:34 +02:00
2008-11-20 20:00:26 +01:00
2008-02-21 18:56:21 +01:00
2009-03-26 21:55:10 +01:00
2009-04-04 01:14:32 +02:00
2009-03-26 21:55:10 +01:00
2009-03-26 21:55:10 +01:00
2008-11-20 20:00:26 +01:00
2008-11-24 17:42:32 +01:00
2009-05-14 21:42:05 +02:00
2008-09-01 15:22:16 -04:00
2009-05-14 21:42:05 +02:00
2008-03-22 03:59:57 +01:00
2009-05-14 21:38:09 +02:00
2009-04-26 23:20:38 +02:00
2009-06-12 03:33:54 +02:00
2008-06-27 22:56:42 +02:00
2009-05-14 21:42:05 +02:00
2009-01-09 20:24:41 +01:00
2009-03-19 11:05:26 +01:00
2009-03-19 10:34:27 +01:00
2009-03-19 11:05:26 +01:00
2009-01-30 06:01:12 +01:00
2009-03-19 11:05:26 +01:00
2008-01-30 13:54:57 +01:00
2009-03-05 01:43:29 +01:00
2009-03-05 01:43:29 +01:00
2009-08-16 12:40:44 +02:00
2009-08-12 21:59:33 +02:00
2009-07-02 02:21:11 +02:00
2008-07-07 01:19:10 +02:00
2009-04-26 21:44:54 +02:00
2009-04-26 21:44:54 +02:00
2009-04-26 21:44:54 +02:00
2009-04-26 21:44:54 +02:00
2009-05-14 21:38:08 +02:00
2009-03-25 19:54:25 +01:00
2009-05-14 21:42:05 +02:00
2009-04-02 10:37:55 +02:00
2008-11-20 20:00:26 +01:00
2008-04-09 20:55:35 +02:00
2009-03-19 11:05:26 +01:00
2008-11-24 17:42:32 +01:00
2009-03-19 11:05:26 +01:00
2009-09-25 21:18:09 +02:00
2009-10-09 17:50:05 +02:00
2009-09-18 15:46:39 +02:00
2009-03-25 22:10:42 +01:00
2008-02-21 18:56:21 +01:00
2008-03-24 16:28:14 +01:00
2009-09-12 02:24:13 +02:00
2008-04-08 11:58:35 +02:00
2008-04-08 11:58:33 +02:00
2009-07-02 01:51:40 +02:00
2008-03-24 16:28:14 +01:00
2009-03-26 21:55:10 +01:00
2009-03-26 21:55:10 +01:00
2009-03-26 21:55:10 +01:00
2008-11-19 17:38:45 +01:00
2008-03-24 16:28:14 +01:00
2009-05-14 21:42:05 +02:00
2008-09-01 15:22:16 -04:00
2008-09-01 15:22:16 -04:00
2009-05-14 21:42:05 +02:00
2008-03-22 03:59:58 +01:00
2008-03-24 16:28:14 +01:00
2009-04-30 19:41:31 +02:00
2009-04-27 20:46:25 +02:00
2009-05-14 21:42:05 +02:00
2008-04-09 19:24:01 +02:00
2008-04-08 20:37:59 +02:00
2009-05-14 21:42:05 +02:00
2009-01-30 06:02:10 +01:00
2008-04-08 20:34:03 +02:00
2009-03-08 23:38:12 +01:00
2009-03-08 23:38:12 +01:00
2009-03-26 21:32:44 +01:00
2009-01-30 06:01:12 +01:00
2009-01-30 06:01:12 +01:00
2009-03-26 21:32:44 +01:00
2009-03-25 22:10:42 +01:00
2008-02-20 23:17:55 +01:00
2008-01-30 13:54:57 +01:00
2009-03-05 01:43:29 +01:00
2009-03-05 01:43:29 +01:00
2009-03-05 01:43:29 +01:00
2009-09-11 21:38:23 +02:00
2009-08-13 00:52:46 +02:00
2009-08-12 21:59:33 +02:00
2009-08-07 10:35:52 +02:00
2009-07-10 17:21:27 +02:00
2009-03-26 21:32:44 +01:00
2009-04-30 20:35:48 +02:00
2009-04-26 21:44:54 +02:00
2009-04-26 21:44:54 +02:00
2009-03-25 19:54:25 +01:00
2009-05-14 21:42:05 +02:00
2008-08-03 12:26:09 -04:00
2009-07-02 01:51:40 +02:00
2008-01-29 03:57:08 +01:00
2009-07-02 04:16:14 +02:00
2008-01-29 03:57:08 +01:00
2008-01-29 03:57:08 +01:00
b132101b63