Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
a69a3cc5ec
NetBSD/sys/netinet
History
itojun 8799a9c64b give a default value to net.inet.ip.maxfragpackets, to protect us from 
"lots of fragmented packets" DoS attack.

the current default value is derived from ipv6 counterpart, which is
a magical value "200".  it should be enough for normal systems, not sure
if it is enough when you take hundreds of thousands of tcp connections on
your system.  if you have proposal for a better value with concrete reasons,
let me know.
2001-04-16 17:03:33 +00:00
..
fil.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
icmp6.h during ip6/icmp6 inbound packet processing, do not call log() nor printf() in 2001-02-07 08:59:47 +00:00
icmp_var.h count successful path MTU changes. good for debugging. 2000-10-18 19:20:02 +00:00
if_arp.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
if_atm.c pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_atm.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_ether.h Add the `packed' attribute to structures which describe wire protocol data. 1999-11-20 00:37:58 +00:00
if_ieee1394arp.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
if_ieee1394arp.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
if_inarp.h pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2 (UCB copyrighted). 2001-01-17 04:05:41 +00:00
igmp_var.h Update protocoles and interfaces stats counters to 64bit. 1999-11-19 10:41:41 +00:00
igmp.c Don't copy M_EXT mbufs unless in "dhcp" mode. Do a mtod after the pullup 2000-06-16 20:21:26 +00:00
igmp.h Add the `packed' attribute to structures which describe wire protocol data. 1999-11-20 00:37:58 +00:00
in4_cksum.c Remove register declarations. 2000-03-30 12:51:13 +00:00
in_cksum.c Remove register declarations. 2000-03-30 12:51:13 +00:00
in_gif.c add AF_ISO case to output. from chopps. 2001-02-20 10:41:47 +00:00
in_gif.h introduce sys/netinet/ip_encap.c, to dispatch inbound packets 2000-04-19 06:30:51 +00:00
in_pcb.c Update for hashinit() change. 2000-11-08 14:28:12 +00:00
in_pcb.h PRU_PURGEADDR -> PRU_PURGEIF, per a discussion w/ itojun. In the IPv4 2000-02-02 23:28:08 +00:00
in_proto.c Add a protosw flag, PR_ABRTACPTDIS (Abort on Accept of Disconnected 2001-03-21 19:22:27 +00:00
in_systm.h
in_var.h - Keep track of allhost multicast address record we joined into 2000-10-08 09:15:28 +00:00
in.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
in.h net.inet.ip.maxfragpackets defines the maximum size of ip reass queue 2001-03-27 02:24:38 +00:00
ip6.h put attribute(packed) for ip6 option headers. they will appear at 2001-01-23 07:21:07 +00:00
ip_auth.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_auth.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_compat.h Delete SPL_IMP(). It is not used in IP Filter, and it aids me 2001-04-12 19:41:53 +00:00
ip_ecn.c fix compilation without INET. fix confusion between ipsecstat and ipsec6stat. 2000-10-02 03:55:41 +00:00
ip_ecn.h sync with latest KAME (rcsid only). 1999-12-12 16:19:40 +00:00
ip_encap.c fix compilation without INET. fix confusion between ipsecstat and ipsec6stat. 2000-10-02 03:55:41 +00:00
ip_encap.h introduce sys/netinet/ip_encap.c, to dispatch inbound packets 2000-04-19 06:30:51 +00:00
ip_fil.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_fil.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_flow.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_frag.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_frag.h fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_ftp_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_gre.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_gre.h Some slight cleanup. 2000-07-06 04:34:26 +00:00
ip_icmp.c Remove a bogus rtfree(); OpenBSD PR 1706. 2001-03-08 00:17:05 +00:00
ip_icmp.h Restructure the Path MTU Discovery code somewhat to avoid 2000-10-18 17:09:14 +00:00
ip_input.c give a default value to net.inet.ip.maxfragpackets, to protect us from 2001-04-16 17:03:33 +00:00
ip_ipip.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_ipip.h introduce sys/netinet/ip_encap.c, to dispatch inbound packets 2000-04-19 06:30:51 +00:00
ip_log.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_mroute.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_mroute.h New callout mechanism with two major improvements over the old 2000-03-23 07:01:25 +00:00
ip_nat.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_nat.h fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_output.c Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
ip_proxy.c expose the definitions of MIN() and MAX() in sys/param.h to the kernel 2001-02-05 10:42:40 +00:00
ip_proxy.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_raudio_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_rcmd_pxy.c Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_state.c fix fragment cache security hole 2001-04-06 15:32:40 +00:00
ip_state.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
ip_var.h increase ipstat.ips_badaddr if the packet fails to pass address checks. 2001-03-02 04:26:10 +00:00
ip.h One more __attribute__((__packed__)) to dissuade egcs from making 2000-05-02 14:15:07 +00:00
ipl.h Resolve conflicts. 2001-03-26 06:11:46 +00:00
Makefile add net/if_stf.h and netinet/ip_encap.h (almost noone will include them though) 2000-04-19 06:39:15 +00:00
raw_ip.c make sure to validate packet against ipsec policy. 2001-02-26 07:20:44 +00:00
tcp_debug.c IPv6 kernel code, based on KAME/NetBSD 1.4, SNAP kit 19990628. 1999-07-01 08:12:45 +00:00
tcp_debug.h sync with recent KAME. 1999-07-31 18:41:15 +00:00
tcp_fsm.h Back out the change from TCP/IP vol 2, in revision 1.7, which removed TH_FIN 1998-07-09 05:49:56 +00:00
tcp_input.c Two changes, designed to make us even more resilient against TCP 2001-03-20 20:07:51 +00:00
tcp_output.c check ip_mtudisc only for TCP over IPv4. 2001-04-03 06:14:31 +00:00
tcp_seq.h Adapt the NEWRENO changes from the UCSB diffs of BSDI 3.0's TCP 1998-10-04 21:33:52 +00:00
tcp_subr.c make this compile without rnd. 2001-03-21 03:35:11 +00:00
tcp_timer.c remove #ifdef TCP6. it is not likely for us to bring in sys/netinet6/tcp6*.c 2000-10-19 20:22:59 +00:00
tcp_timer.h Create tcp.keepidle, tcp.keepintvl, tcp.keepcnt, tcp.slowhz sysctls. 1998-09-10 10:46:03 +00:00
tcp_usrreq.c Two changes, designed to make us even more resilient against TCP 2001-03-20 20:07:51 +00:00
tcp_var.h Remove the use of splimp() from the NetBSD kernel. splnet() 2001-04-13 23:29:55 +00:00
tcp.h added a linted comment about non-portable bitfields. Unfortunately it cannot 2000-07-05 02:45:03 +00:00
tcpip.h Add the `packed' attribute to structures which describe wire protocol data. 1999-11-20 00:37:58 +00:00
udp_usrreq.c - record IPsec packet history into m_aux structure. 2001-01-24 09:04:15 +00:00
udp_var.h Add the `packed' attribute to structures which describe wire protocol data. 1999-11-20 00:37:58 +00:00
udp.h Add the `packed' attribute to structures which describe wire protocol data. 1999-11-20 00:37:58 +00:00