Messages in this thread | | | Date | Fri, 12 Nov 2010 11:28:36 -0800 (PST) | Subject | Re: [RFC PATCH] network: return errors if we know tcp_connect failed | From | David Miller <> |
| |
From: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru> Date: Fri, 12 Nov 2010 20:46:20 +0300
> The only loophole is ICMP error in the same case as yours. In > _violation_ of specs linux immediately aborts unestablished connect > on an icmp error. IMHO that thing which you suggest is correct (of > course, provided you filter out transient errors and react only to > EPERM or something like this). It was not done because it was > expected firewall rule prescribing immediate abort is configured > with "--reject-with icmp-port-unreachable", otherwise the rule > orders real blackhole.
The idea to signal on -EPERM might be OK, but if that's also what things like "-m statistical" and friends end up reporting then we still cannot do it.
| |