Permission Denied's Journal: Linux 2.2 IPID patch

This is against 2.2.22. This is two hours of work, so YMMV (it would be something like two minutes of work for someone actually familiar with the Linux net code). This could be done much more efficiently (the condition could be detected higher up in the TCP stack so fewer packets would be checked, but that requires quite a bit more work with how Linux net code is set up). Base-64 encoded to preserve formatting (use "base64 -d" to decode). If you want a real patch that behaves the same way in all conditions and works more efficiently, reply.

LS0tIGxpbnV4Lm9yaWcvbmV0L2lwdjQvaXBfb3V0cHV0LmMJU3VuIE1hciAyNSAxMDozMTox
MiAyMDAxCisrKyBsaW51eC9uZXQvaXB2NC9pcF9vdXRwdXQuYwlUdWUgT2N0IDIyIDAwOjQz
OjM0IDIwMDIKQEAgLTUyMCw2ICs1MjAsNyBAQAogCQkgCiAJCXsKIAkJCXN0cnVjdCBpcGhk
ciAqaXBoID0gKHN0cnVjdCBpcGhkciAqKWRhdGE7CisJCQlzdHJ1Y3QgdGNwaGRyICp0Y3Bo
OwogCiAJCQlpcGgtPnZlcnNpb24gPSA0OwogCQkJaXBoLT5paGwgPSA1OwpAQCAtNTQxLDYg
KzU0MiwxMyBAQAogCQkJaXBoLT5jaGVjayA9IDA7CiAJCQlpcGgtPnNhZGRyID0gcnQtPnJ0
X3NyYzsKIAkJCWlwaC0+ZGFkZHIgPSBydC0+cnRfZHN0OworCQkJaWYgKHNrLT5wcm90b2Nv
bCA9PSA2KSB7CisJCQkJdGNwaCA9IChzdHJ1Y3QgdGNwaGRyICopKGRhdGEgKyBpcGgtPmlo
bCo0KTsKKwkJCQlpZiAodGNwaC0+cnN0KSB7CisJCQkJCWlwaC0+aWQgPSAwOworCQkJCX0K
KwkJCX0KKwogCQkJaXBoLT5jaGVjayA9IGlwX2Zhc3RfY3N1bSgodW5zaWduZWQgY2hhciAq
KWlwaCwgaXBoLT5paGwpOwogCQkJZGF0YSArPSBpcGgtPmlobCo0OwogCQkJCg==