Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netinet
History
itojun 8799a9c64b give a default value to net.inet.ip.maxfragpackets, to protect us from 
"lots of fragmented packets" DoS attack.

the current default value is derived from ipv6 counterpart, which is
a magical value "200".  it should be enough for normal systems, not sure
if it is enough when you take hundreds of thousands of tcp connections on
your system.  if you have proposal for a better value with concrete reasons,
let me know.
 		2001-04-16 17:03:33 +00:00
..
Makefile
…
fil.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
icmp6.h during ip6/icmp6 inbound packet processing, do not call log() nor printf() in 2001-02-07 08:59:47 +00:00
icmp_var.h count successful path MTU changes. good for debugging. 2000-10-18 19:20:02 +00:00
if_arp.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
if_atm.c pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_atm.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_ether.h
…
if_ieee1394arp.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
if_ieee1394arp.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_inarp.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
igmp.c
…
igmp.h
…
igmp_var.h
…
in.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
in.h net.inet.ip.maxfragpackets defines the maximum size of ip reass queue 2001-03-27 02:24:38 +00:00
in4_cksum.c
…
in_cksum.c
…
in_gif.c add AF_ISO case to output. from chopps. 2001-02-20 10:41:47 +00:00
in_gif.h
…
in_pcb.c Update for hashinit() change. 2000-11-08 14:28:12 +00:00
in_pcb.h
…
in_proto.c Add a protosw flag, PR_ABRTACPTDIS (Abort on Accept of Disconnected 2001-03-21 19:22:27 +00:00
in_systm.h
…
in_var.h - Keep track of allhost multicast address record we joined into 2000-10-08 09:15:28 +00:00
ip.h
…
ip6.h put attribute(packed) for ip6 option headers. they will appear at 2001-01-23 07:21:07 +00:00
ip_auth.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_auth.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_compat.h Delete SPL_IMP(). It is not used in IP Filter, and it aids me 2001-04-12 19:41:53 +00:00
ip_ecn.c fix compilation without INET. fix confusion between ipsecstat and ipsec6stat. 2000-10-02 03:55:41 +00:00
ip_ecn.h
…
ip_encap.c fix compilation without INET. fix confusion between ipsecstat and ipsec6stat. 2000-10-02 03:55:41 +00:00
ip_encap.h
…
ip_fil.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_fil.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_flow.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_frag.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_frag.h fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_ftp_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_gre.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_gre.h Some slight cleanup. 2000-07-06 04:34:26 +00:00
ip_icmp.c Remove a bogus rtfree(); OpenBSD PR 1706. 2001-03-08 00:17:05 +00:00
ip_icmp.h Restructure the Path MTU Discovery code somewhat to avoid 2000-10-18 17:09:14 +00:00
ip_input.c give a default value to net.inet.ip.maxfragpackets, to protect us from 2001-04-16 17:03:33 +00:00
ip_ipip.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_ipip.h
…
ip_log.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_mroute.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_mroute.h
…
ip_nat.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_nat.h fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_output.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_proxy.c expose the definitions of MIN() and MAX() in sys/param.h to the kernel 2001-02-05 10:42:40 +00:00
ip_proxy.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_raudio_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_rcmd_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_state.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_state.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_var.h increase ipstat.ips_badaddr if the packet fails to pass address checks. 2001-03-02 04:26:10 +00:00
ipl.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
raw_ip.c make sure to validate packet against ipsec policy. 2001-02-26 07:20:44 +00:00
tcp.h added a linted comment about non-portable bitfields. Unfortunately it cannot 2000-07-05 02:45:03 +00:00
tcp_debug.c
…
tcp_debug.h
…
tcp_fsm.h
…
tcp_input.c Two changes, designed to make us even more resilient against TCP 2001-03-20 20:07:51 +00:00
tcp_output.c check ip_mtudisc only for TCP over IPv4. 2001-04-03 06:14:31 +00:00
tcp_seq.h
…
tcp_subr.c make this compile without rnd. 2001-03-21 03:35:11 +00:00
tcp_timer.c remove #ifdef TCP6. it is not likely for us to bring in sys/netinet6/tcp6*.c 2000-10-19 20:22:59 +00:00
tcp_timer.h
…
tcp_usrreq.c Two changes, designed to make us even more resilient against TCP 2001-03-20 20:07:51 +00:00
tcp_var.h Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
tcpip.h
…
udp.h
…
udp_usrreq.c - record IPsec packet history into m_aux structure. 2001-01-24 09:04:15 +00:00
udp_var.h
…