Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
57129fea9b
NetBSD/sys/netinet
History
itojun 8799a9c64b give a default value to net.inet.ip.maxfragpackets, to protect us from 
"lots of fragmented packets" DoS attack.

the current default value is derived from ipv6 counterpart, which is
a magical value "200".  it should be enough for normal systems, not sure
if it is enough when you take hundreds of thousands of tcp connections on
your system.  if you have proposal for a better value with concrete reasons,
let me know.
2001-04-16 17:03:33 +00:00
..
fil.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
icmp6.h during ip6/icmp6 inbound packet processing, do not call log() nor printf() in 2001-02-07 08:59:47 +00:00
icmp_var.h
if_arp.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
if_atm.c pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_atm.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_ether.h
if_ieee1394arp.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
if_ieee1394arp.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_inarp.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
igmp_var.h
igmp.c
igmp.h
in4_cksum.c
in_cksum.c
in_gif.c add AF_ISO case to output. from chopps. 2001-02-20 10:41:47 +00:00
in_gif.h
in_pcb.c
in_pcb.h
in_proto.c Add a protosw flag, PR_ABRTACPTDIS (Abort on Accept of Disconnected 2001-03-21 19:22:27 +00:00
in_systm.h
in_var.h
in.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
in.h net.inet.ip.maxfragpackets defines the maximum size of ip reass queue 2001-03-27 02:24:38 +00:00
ip6.h put attribute(packed) for ip6 option headers. they will appear at 2001-01-23 07:21:07 +00:00
ip_auth.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_auth.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_compat.h Delete SPL_IMP(). It is not used in IP Filter, and it aids me 2001-04-12 19:41:53 +00:00
ip_ecn.c
ip_ecn.h
ip_encap.c
ip_encap.h
ip_fil.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_fil.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_flow.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_frag.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_frag.h fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_ftp_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_gre.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_gre.h
ip_icmp.c Remove a bogus rtfree(); OpenBSD PR 1706. 2001-03-08 00:17:05 +00:00
ip_icmp.h
ip_input.c give a default value to net.inet.ip.maxfragpackets, to protect us from 2001-04-16 17:03:33 +00:00
ip_ipip.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_ipip.h
ip_log.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_mroute.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_mroute.h
ip_nat.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_nat.h fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_output.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_proxy.c expose the definitions of MIN() and MAX() in sys/param.h to the kernel 2001-02-05 10:42:40 +00:00
ip_proxy.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_raudio_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_rcmd_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_state.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_state.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_var.h increase ipstat.ips_badaddr if the packet fails to pass address checks. 2001-03-02 04:26:10 +00:00
ip.h
ipl.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
Makefile
raw_ip.c make sure to validate packet against ipsec policy. 2001-02-26 07:20:44 +00:00
tcp_debug.c
tcp_debug.h
tcp_fsm.h
tcp_input.c Two changes, designed to make us even more resilient against TCP 2001-03-20 20:07:51 +00:00
tcp_output.c check ip_mtudisc only for TCP over IPv4. 2001-04-03 06:14:31 +00:00
tcp_seq.h
tcp_subr.c make this compile without rnd. 2001-03-21 03:35:11 +00:00
tcp_timer.c
tcp_timer.h
tcp_usrreq.c Two changes, designed to make us even more resilient against TCP 2001-03-20 20:07:51 +00:00
tcp_var.h Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
tcp.h
tcpip.h
udp_usrreq.c - record IPsec packet history into m_aux structure. 2001-01-24 09:04:15 +00:00
udp_var.h
udp.h