diff --git a/[refs] b/[refs]
index 6e6fcb37f222..537c2773301d 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: ab32cd793dca21eec846a8204390d9594ed994d5
+refs/heads/master: d2ee3f2c4b1db1320c1efb4dcaceeaf6c7e6c2d3
diff --git a/trunk/net/netfilter/xt_connlimit.c b/trunk/net/netfilter/xt_connlimit.c
index 2e89a00df92c..70907f6baac3 100644
--- a/trunk/net/netfilter/xt_connlimit.c
+++ b/trunk/net/netfilter/xt_connlimit.c
@@ -73,7 +73,8 @@ connlimit_iphash6(const union nf_inet_addr *addr,
 static inline bool already_closed(const struct nf_conn *conn)
 {
 	if (nf_ct_protonum(conn) == IPPROTO_TCP)
-		return conn->proto.tcp.state == TCP_CONNTRACK_TIME_WAIT;
+		return conn->proto.tcp.state == TCP_CONNTRACK_TIME_WAIT ||
+		       conn->proto.tcp.state == TCP_CONNTRACK_CLOSE;
 	else
 		return 0;
 }