New release notes: SYN flood resistance, fmt(1) rewrite, df(1) -l,

traceroute(8) default maximum TTL.

Modified release notes:  reverse sense of ipfw(8) -d and add ipfw(8) -e.
This commit is contained in:
Bruce A. Mah 2001-06-06 22:08:26 +00:00
parent 5beb572b41
commit dafc44644b
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=77841
3 changed files with 48 additions and 6 deletions

View File

@ -396,8 +396,9 @@
<para>&man.ipfw.8; now filters correctly in the presence of ECN bits in TCP
segments. &merged;</para>
<para>&man.ipfw.8; now has a <option>-d</option> flag to prevent
the display of dynamic firewall rules.</para>
<para>&man.ipfw.8; will now avoid the display of dynamic
firewall rules unless the <option>-d</option> flag is passed to
it. The <option>-e</option> lists expired dynamic rules.</para>
<para>&man.bridge.4; and &man.dummynet.4; have received some
enhancements and bug fixes.</para>
@ -814,6 +815,9 @@
hierarchy. This bug has been fixed (see security advisory
FreeBSD-SA-01:40). &merged;</para>
<para>&os;'s TCP implementation has been made more resistant to
SYN floods, by eliminating the RST segment normally sent when
removing a connection from the listen queue.</para>
</sect2>
<sect2>
<title>Userland Changes</title>
@ -1408,6 +1412,12 @@
be controlled by the <varname>diskcheckd_enable</varname> variable
in &man.rc.conf.5;.</para>
<para>&man.fmt.1; has been rewritten; the rewrite fixes a number
of bugs compared to its prior behavior.</para>
<para>&man.df.1; now takes a <option>-l</option> option to only
display information about locally-mounted filesystems.</para>
<sect3>
<title>Contributed Software</title>
@ -1504,6 +1514,10 @@
<application>tcsh</application> has been updated to version
6.10. &merged;</para>
<para>&man.traceroute.8; now takes its default maximum TTL value
from the <varname>net.inet.ip.ttl</varname> sysctl
variable.</para>
<sect4>
<title>OpenSSH</title>

View File

@ -396,8 +396,9 @@
<para>&man.ipfw.8; now filters correctly in the presence of ECN bits in TCP
segments. &merged;</para>
<para>&man.ipfw.8; now has a <option>-d</option> flag to prevent
the display of dynamic firewall rules.</para>
<para>&man.ipfw.8; will now avoid the display of dynamic
firewall rules unless the <option>-d</option> flag is passed to
it. The <option>-e</option> lists expired dynamic rules.</para>
<para>&man.bridge.4; and &man.dummynet.4; have received some
enhancements and bug fixes.</para>
@ -814,6 +815,9 @@
hierarchy. This bug has been fixed (see security advisory
FreeBSD-SA-01:40). &merged;</para>
<para>&os;'s TCP implementation has been made more resistant to
SYN floods, by eliminating the RST segment normally sent when
removing a connection from the listen queue.</para>
</sect2>
<sect2>
<title>Userland Changes</title>
@ -1408,6 +1412,12 @@
be controlled by the <varname>diskcheckd_enable</varname> variable
in &man.rc.conf.5;.</para>
<para>&man.fmt.1; has been rewritten; the rewrite fixes a number
of bugs compared to its prior behavior.</para>
<para>&man.df.1; now takes a <option>-l</option> option to only
display information about locally-mounted filesystems.</para>
<sect3>
<title>Contributed Software</title>
@ -1504,6 +1514,10 @@
<application>tcsh</application> has been updated to version
6.10. &merged;</para>
<para>&man.traceroute.8; now takes its default maximum TTL value
from the <varname>net.inet.ip.ttl</varname> sysctl
variable.</para>
<sect4>
<title>OpenSSH</title>

View File

@ -396,8 +396,9 @@
<para>&man.ipfw.8; now filters correctly in the presence of ECN bits in TCP
segments. &merged;</para>
<para>&man.ipfw.8; now has a <option>-d</option> flag to prevent
the display of dynamic firewall rules.</para>
<para>&man.ipfw.8; will now avoid the display of dynamic
firewall rules unless the <option>-d</option> flag is passed to
it. The <option>-e</option> lists expired dynamic rules.</para>
<para>&man.bridge.4; and &man.dummynet.4; have received some
enhancements and bug fixes.</para>
@ -814,6 +815,9 @@
hierarchy. This bug has been fixed (see security advisory
FreeBSD-SA-01:40). &merged;</para>
<para>&os;'s TCP implementation has been made more resistant to
SYN floods, by eliminating the RST segment normally sent when
removing a connection from the listen queue.</para>
</sect2>
<sect2>
<title>Userland Changes</title>
@ -1408,6 +1412,12 @@
be controlled by the <varname>diskcheckd_enable</varname> variable
in &man.rc.conf.5;.</para>
<para>&man.fmt.1; has been rewritten; the rewrite fixes a number
of bugs compared to its prior behavior.</para>
<para>&man.df.1; now takes a <option>-l</option> option to only
display information about locally-mounted filesystems.</para>
<sect3>
<title>Contributed Software</title>
@ -1504,6 +1514,10 @@
<application>tcsh</application> has been updated to version
6.10. &merged;</para>
<para>&man.traceroute.8; now takes its default maximum TTL value
from the <varname>net.inet.ip.ttl</varname> sysctl
variable.</para>
<sect4>
<title>OpenSSH</title>