itojun 8799a9c64b give a default value to net.inet.ip.maxfragpackets, to protect us from ... "lots of fragmented packets" DoS attack. the current default value is derived from ipv6 counterpart, which is a magical value "200". it should be enough for normal systems, not sure if it is enough when you take hundreds of thousands of tcp connections on your system. if you have proposal for a better value with concrete reasons, let me know.		2001-04-16 17:03:33 +00:00
..
fil.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
icmp6.h
icmp_var.h
if_arp.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
if_atm.c
if_atm.h
if_ether.h
if_ieee1394arp.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
if_ieee1394arp.h
if_inarp.h
igmp_var.h
igmp.c
igmp.h
in4_cksum.c
in_cksum.c
in_gif.c
in_gif.h
in_pcb.c
in_pcb.h
in_proto.c	Add a protosw flag, PR_ABRTACPTDIS (Abort on Accept of Disconnected	2001-03-21 19:22:27 +00:00
in_systm.h
in_var.h
in.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
in.h	net.inet.ip.maxfragpackets defines the maximum size of ip reass queue	2001-03-27 02:24:38 +00:00
ip6.h
ip_auth.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_auth.h	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_compat.h	Delete SPL_IMP(). It is not used in IP Filter, and it aids me	2001-04-12 19:41:53 +00:00
ip_ecn.c
ip_ecn.h
ip_encap.c
ip_encap.h
ip_fil.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_fil.h	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_flow.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
ip_frag.c	fix fragment cache security hole	2001-04-06 15:32:40 +00:00
ip_frag.h	fix fragment cache security hole	2001-04-06 15:32:40 +00:00
ip_ftp_pxy.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_gre.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
ip_gre.h
ip_icmp.c	Remove a bogus rtfree(); OpenBSD PR 1706.	2001-03-08 00:17:05 +00:00
ip_icmp.h
ip_input.c	give a default value to net.inet.ip.maxfragpackets, to protect us from	2001-04-16 17:03:33 +00:00
ip_ipip.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
ip_ipip.h
ip_log.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_mroute.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
ip_mroute.h
ip_nat.c	fix fragment cache security hole	2001-04-06 15:32:40 +00:00
ip_nat.h	fix fragment cache security hole	2001-04-06 15:32:40 +00:00
ip_output.c	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
ip_proxy.c
ip_proxy.h	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_raudio_pxy.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_rcmd_pxy.c	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_state.c	fix fragment cache security hole	2001-04-06 15:32:40 +00:00
ip_state.h	Resolve conflicts.	2001-03-26 06:11:46 +00:00
ip_var.h	increase ipstat.ips_badaddr if the packet fails to pass address checks.	2001-03-02 04:26:10 +00:00
ip.h
ipl.h	Resolve conflicts.	2001-03-26 06:11:46 +00:00
Makefile
raw_ip.c
tcp_debug.c
tcp_debug.h
tcp_fsm.h
tcp_input.c	Two changes, designed to make us even more resilient against TCP	2001-03-20 20:07:51 +00:00
tcp_output.c	check ip_mtudisc only for TCP over IPv4.	2001-04-03 06:14:31 +00:00
tcp_seq.h
tcp_subr.c	make this compile without rnd.	2001-03-21 03:35:11 +00:00
tcp_timer.c
tcp_timer.h
tcp_usrreq.c	Two changes, designed to make us even more resilient against TCP	2001-03-20 20:07:51 +00:00
tcp_var.h	Remove the use of splimp() from the NetBSD kernel. splnet()	2001-04-13 23:29:55 +00:00
tcp.h
tcpip.h
udp_usrreq.c
udp_var.h
udp.h