TSG-9313: 判断重复流量的逻辑偏后导致的RESET包提前丢弃(未执行到判断是否为重复流量的逻辑)v4.2.83

1 files changed, 1 insertions, 7 deletions

diff --git a/src/dealpkt/deal_tcp.c b/src/dealpkt/deal_tcp.c
index 503214c..82853c1 100644
--- a/src/dealpkt/deal_tcp.c
+++ b/src/dealpkt/deal_tcp.c
@@ -2805,13 +2805,6 @@ static int deal_tcp_stream(struct streamindex *pindex, const void *this_iphdr, s
 		//return DROP; /* 2019-11-20 lijia modify, kill_tcp��Ĭ����Ϊ����DROP, ֻ����rst��, �Ƿ񶪰�ȡ����drop_stream_flag */
 	}
 
-	if(unlikely(pdetail_pr->drop_stream_flag != 0)){
-		sapp_runtime_log(RLOG_LV_DEBUG, "TCP stream: %s, has been set drop flag, curdir:%d, return DROP.", 
-						printaddr(&pstream->addr, pstream->threadnum), pstream->curdir);
-		lrustream(pindex_tcp);
-		return DROP;
-	}
-
 	/* 
 		2021-05-18 lijia close ipv6 dup pkt check:
 		IPv6��Ϊû��Ipid�ֶ�, �޷�����������Ӧ�ò��ش����ظ�����, �����˻ᵼ�¶�������CT, ���Բ�֧��!!!
@@ -2830,6 +2823,7 @@ static int deal_tcp_stream(struct streamindex *pindex, const void *this_iphdr, s
 	if(unlikely(pdetail_pr->drop_stream_flag != 0)){
 		sapp_runtime_log(RLOG_LV_DEBUG, "TCP stream: %s, has been set drop flag, curdir:%d, return DROP.", 
 						printaddr(&pstream->addr, pstream->threadnum), pstream->curdir);
+		lrustream(pindex_tcp);
 		return DROP;
 	}