[ 21/89] netfilter: Mark SYN/ACK packets as invalid from original direction

3.2-stable review patch. If anyone has any objections, please let me know. -- From: Jozsef Kadlecsik commit 64f509ce71b08d037998e93dd51180c19b2f464c upstream. Clients should not send such packets. By accepting them, we open up a hole by wich ephemeral ports can be discovered

[ 21/89] netfilter: Mark SYN/ACK packets as invalid from original direction

3.2-stable review patch. If anyone has any objections, please let me know. -- From: Jozsef Kadlecsik kad...@blackhole.kfki.hu commit 64f509ce71b08d037998e93dd51180c19b2f464c upstream. Clients should not send such packets. By accepting them, we open up a hole by wich ephemeral