tmp: Ensure packet order

Author: MikeWang000000

src/nfqueue.c

@@ -102,6 +102,8 @@ static int callback(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg,
     if (res < 0) {
         EE(T(fh_rawsend_handle));
         goto ret_accept;
+    } else if (res == 100) {
+        return nfq_set_verdict(qh, pkt_id, NF_DROP, pkt_len, pkt_data);
     }
 
     if (modified) {

src/rawsend.c

@@ -258,6 +258,7 @@ int fh_rawsend_handle(struct sockaddr_ll *sll, uint8_t *pkt_data, int pkt_len,
     char src_ip[INET6_ADDRSTRLEN], dst_ip[INET6_ADDRSTRLEN];
     struct sockaddr_storage saddr_store, daddr_store;
     struct sockaddr *saddr, *daddr;
+    ssize_t nbytes;
 
     *modified = 0;
 
@@ -378,7 +379,14 @@ int fh_rawsend_handle(struct sockaddr_ll *sll, uint8_t *pkt_data, int pkt_len,
         E_INFO("%s:%u <===FAKE(*)=== %s:%u", dst_ip, ntohs(tcph->dest), src_ip,
                ntohs(tcph->source));
 
-        return 0;
+        nbytes = sendto(sockfd, pkt_data, pkt_len, 0, (struct sockaddr *) sll,
+                        sizeof(*sll));
+        if (nbytes < 0) {
+            E("ERROR: sendto(): %s", strerror(errno));
+            return -1;
+        }
+
+        return 100;
     } else if (sll->sll_pkttype == PACKET_HOST && tcph->syn) {
         if (!g_ctx.inbound) {
             E_INFO("%s:%u ===SYN(?)===> %s:%u", src_ip, ntohs(tcph->source),