philwhineray

Hi, sorry for the lack of reply until now. TLDR; I would certainly accept a documentation patch, and possibly a code patch. If you don't have the time / inclination,...

You could a command to accept RSTs regardless, but I think it is maybe over-specific. A new complex rule (in the sense that it is implemented with a bash function,...

I still don't think the RFC applies here - it is taking about sending RST in response to unknown conditions which prevents extensions to the TCP protocol. Smart reset sends...

I see that you mentioned ICMP unreachable - but my understanding is that the behaviour of TCP in response to that is itself not very well defined, which is the...

Is your `/bin/bash` actually bash? I can recreate that error by using e.g. `dash`.

You can change ACTIVATION_POLICY to REJECT but this takes effect only during the actual activation, which used to be quite slow. With fast activation, the recent default, I'm don't think...

OK, I've worked it through. This is caused by the "all" client service. Since "all" by definition does not match on any other criteria, after the initial SYN (guaranteed outgoing...

Change LGTM but I don't know why proxyspy was removed originally. @ktsaou are we OK to put this bacK?

Hi, sorry for the slow reply. It looks like your sleep command does not support fractions of a second (I guess on openwrt that this is a busybox thing). You...

This is used only to enable/disable build time tests, I don't think it affects end users. The test could be moved to the top of `tests/unittest` as an alternative but...