Re: 4.1.31 ip_ftp_pxy.c error
Steve Clark <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <26615_1228741453_493D1B4D_26615_2615_1_493D1B20.9010507@netwolves.com> |
Darren Reed wrote: > Steve, > > I don't know which web server/site you were connecting to > that produced the problem, but I'm having a stab at fixing it. > > Try the attached patch. > > Darren > > > <..snip..> Here is the results - still the same - looks like the junk flag is getting reset before it should. Now that I understand what you are trying to do I'll continue to look at the code. Steve Dec 8 07:38:18 Z2873 kernel: OUT: 2 seq dc1386ab/0 ack 0/0 len 0/64 off 64 Dec 8 07:38:18 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:18 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:18 Z2873 kernel: rv 0 t:seq[0] 0 seq[1] 0 0/0 Dec 8 07:38:18 Z2873 kernel: ippr_ftp_process:f:seq[0] 0 seq[1] 0 Dec 8 07:38:19 Z2873 kernel: OUT: 10 seq dc1386ac/0 ack 55da10a2/0 len 0/52 off 52 Dec 8 07:38:19 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:19 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:19 Z2873 kernel: rv 0 t:seq[0] 55da10a2 seq[1] 0 0/0 Dec 8 07:38:19 Z2873 kernel: ippr_ftp_process:f:seq[0] dc1386ac seq[1] 0 Dec 8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da10a2 ackmin 0 Dec 8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0 Dec 8 07:38:23 Z2873 kernel: IN: 18 seq 55da10a2/0 ack dc1386ac/0 len 7/59 off 52 Dec 8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0 Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:len 7/0 off 59 wptr c265aec7 junk 0 [220- Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_valid=3 len 7 rv 1 ptr c265aec0/c265aec7 buf [220- Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da10a9 inc 0 len 0 Dec 8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da10a9 ackmin 0 Dec 8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0 Dec 8 07:38:23 Z2873 kernel: IN: 18 seq 55da10a9/0 ack dc1386ac/0 len 75/127 off 52 Dec 8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0 Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:len 75/0 off 127 wptr c265af0b junk 3 [ **************************** ***** WARNING ***************************** Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 75 rv 1 ptr c265aec0/c265af0b buf [ **************************** ***** WARNING ***************************** Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da10f4 inc 0 len 0 Dec 8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da10f4 ackmin 0 Dec 8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0 Dec 8 07:38:23 Z2873 kernel: IN: 18 seq 55da10f4/0 ack dc1386ac/0 len 63/115 off 52 Dec 8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0 Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:len 63/0 off 115 wptr c265aeff junk 0 [ This system is fo r use by authorized users only. Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 63 rv 1 ptr c265aec0/c265aeff buf [ This system is fo r use by authorized users only. Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da1133 inc 0 len 0 Dec 8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da1133 ackmin 0 Dec 8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0 Dec 8 07:38:23 Z2873 kernel: IN: 18 seq 55da1133/0 ack dc1386ac/0 len 75/127 off 52 Dec 8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0 Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:len 75/0 off 127 wptr c265af0b junk 0 [ **************************** ******************************************* Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 75 rv 1 ptr c265aec0/c265af0b buf [ **************************** ******************************************* Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da117e inc 0 len 0 Dec 8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da117e ackmin 0 Dec 8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0 Dec 8 07:38:23 Z2873 kernel: IN: 18 seq 55da117e/0 ack dc1386ac/0 len 75/127 off 52 Dec 8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0 Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:len 75/0 off 127 wptr c265af0b junk 0 [ All activities on this syste m are recorded and may be monitored for the Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 75 rv 1 ptr c265aec0/c265af0b buf [ All activities on this syste m are recorded and may be monitored for the Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da11c9 inc 0 len 0 Dec 8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da11c9 ackmin 0 Dec 8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0 Dec 8 07:38:23 Z2873 kernel: IN: 18 seq 55da11c9/0 ack dc1386ac/0 len 78/130 off 52 Dec 8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0 Dec 8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0 Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:len 78/0 off 130 wptr c265af0e junk 0 [purpose of tracking down intru ders. In the course of monitoring individuals Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_server_valid:bad:junk 0 len 78/77 c 0x70 buf [purpose of tracking down intrud ers. In the course of monitoring individuals Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_valid=1 len 78 rv 1 ptr c265aec0/c265af0e buf [purpose of tracking down intru ders. In the course of monitoring individuals Dec 8 07:38:23 Z2873 kernel: ] Dec 8 07:38:23 Z2873 kernel: ippr_ftp_process:cmds == 0 junk == 1