don't reject

metalbear-co · Apr 7, 2024 · 40c3f25 · 40c3f25
1 parent a31c2bb
commit 40c3f25
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/mirrord/agent/src/steal/ip_tables/flush_connections.rs b/mirrord/agent/src/steal/ip_tables/flush_connections.rs
@@ -37,13 +37,6 @@ where
         let managed =
             IPTableChain::create(ipt.with_table("filter").into(), IPTABLE_INPUT.to_string())?;
 
-        // specify tcp protocol, if we don't we can't reject with tcp-reset
-        if let Err(e) = managed.add_rule(&format!(
-            "-p tcp -m connmark --mark {MARK} -j REJECT --reject-with tcp-reset"
-        )) {
-            warn!("Failed to add rule to reject connections: {e}");
-        }
-
         Ok(FlushConnections { managed, inner })
     }