nfqws: do not drop packet in case of hopbyhop desync and ipv4

3 years ago · a66aa7777a
10 changed files with 6 additions and 4 deletions
--- a/binaries/aarch64/nfqws
+++ b/binaries/aarch64/nfqws
--- a/binaries/arm/nfqws
+++ b/binaries/arm/nfqws
--- a/binaries/freebsd-x64/dvtws
+++ b/binaries/freebsd-x64/dvtws
--- a/binaries/mips32r1-lsb/nfqws
+++ b/binaries/mips32r1-lsb/nfqws
--- a/binaries/mips32r1-msb/nfqws
+++ b/binaries/mips32r1-msb/nfqws
--- a/binaries/mips64r2-msb/nfqws
+++ b/binaries/mips64r2-msb/nfqws
--- a/binaries/ppc/nfqws
+++ b/binaries/ppc/nfqws
--- a/binaries/x86/nfqws
+++ b/binaries/x86/nfqws
--- a/binaries/x86_64/nfqws
+++ b/binaries/x86_64/nfqws
--- a/nfq/desync.c
+++ b/nfq/desync.c
@ -396,9 +396,10 @@ packet_process_result dpi_desync_tcp_packet(uint8_t *data_pkt, size_t len_pkt, s
 					DLOG("resending original packet with hop-by-hop options\n");
 					if (!rawsend((struct sockaddr *)&dst, params.desync_fwmark, pkt1, pkt1_len))
 						return res;
+					// this mode is final, no other options available
+					return drop;
 				}
-				// this mode is final, no other options available
-				return drop;
+				return res;
 		}

 		if (b)
@ -673,9 +674,10 @@ packet_process_result dpi_desync_udp_packet(uint8_t *data_pkt, size_t len_pkt, s
 					DLOG("resending original packet with hop-by-hop options\n");
 					if (!rawsend((struct sockaddr *)&dst, params.desync_fwmark, pkt1, pkt1_len))
 						return res;
+					// this mode is final, no other options available
+					return drop;
 				}
-				// this mode is final, no other options available
-				return drop;
+				return res;
 		}

 		if (b)