rmind f5f72a013e npf_tcp_inwindow: inspect the sequence numbers even if the packet contains no
data, fixing up only the RST to the initial SYN.  This makes off-path attacks
more difficult.  For the reference, see "Reflection Scan: an Off-Path Attack
on TCP" by Jan Wrobel.
2012-10-06 23:50:17 +00:00
..
2012-09-23 01:14:19 +00:00
2012-09-24 03:05:53 +00:00