New release notes: SYN flood resistance, fmt(1) rewrite, df(1) -l,
traceroute(8) default maximum TTL. Modified release notes: reverse sense of ipfw(8) -d and add ipfw(8) -e.
This commit is contained in:
parent
5beb572b41
commit
dafc44644b
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=77841
@ -396,8 +396,9 @@
|
||||
<para>&man.ipfw.8; now filters correctly in the presence of ECN bits in TCP
|
||||
segments. &merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now has a <option>-d</option> flag to prevent
|
||||
the display of dynamic firewall rules.</para>
|
||||
<para>&man.ipfw.8; will now avoid the display of dynamic
|
||||
firewall rules unless the <option>-d</option> flag is passed to
|
||||
it. The <option>-e</option> lists expired dynamic rules.</para>
|
||||
|
||||
<para>&man.bridge.4; and &man.dummynet.4; have received some
|
||||
enhancements and bug fixes.</para>
|
||||
@ -814,6 +815,9 @@
|
||||
hierarchy. This bug has been fixed (see security advisory
|
||||
FreeBSD-SA-01:40). &merged;</para>
|
||||
|
||||
<para>&os;'s TCP implementation has been made more resistant to
|
||||
SYN floods, by eliminating the RST segment normally sent when
|
||||
removing a connection from the listen queue.</para>
|
||||
</sect2>
|
||||
<sect2>
|
||||
<title>Userland Changes</title>
|
||||
@ -1408,6 +1412,12 @@
|
||||
be controlled by the <varname>diskcheckd_enable</varname> variable
|
||||
in &man.rc.conf.5;.</para>
|
||||
|
||||
<para>&man.fmt.1; has been rewritten; the rewrite fixes a number
|
||||
of bugs compared to its prior behavior.</para>
|
||||
|
||||
<para>&man.df.1; now takes a <option>-l</option> option to only
|
||||
display information about locally-mounted filesystems.</para>
|
||||
|
||||
<sect3>
|
||||
<title>Contributed Software</title>
|
||||
|
||||
@ -1504,6 +1514,10 @@
|
||||
<application>tcsh</application> has been updated to version
|
||||
6.10. &merged;</para>
|
||||
|
||||
<para>&man.traceroute.8; now takes its default maximum TTL value
|
||||
from the <varname>net.inet.ip.ttl</varname> sysctl
|
||||
variable.</para>
|
||||
|
||||
<sect4>
|
||||
<title>OpenSSH</title>
|
||||
|
||||
|
@ -396,8 +396,9 @@
|
||||
<para>&man.ipfw.8; now filters correctly in the presence of ECN bits in TCP
|
||||
segments. &merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now has a <option>-d</option> flag to prevent
|
||||
the display of dynamic firewall rules.</para>
|
||||
<para>&man.ipfw.8; will now avoid the display of dynamic
|
||||
firewall rules unless the <option>-d</option> flag is passed to
|
||||
it. The <option>-e</option> lists expired dynamic rules.</para>
|
||||
|
||||
<para>&man.bridge.4; and &man.dummynet.4; have received some
|
||||
enhancements and bug fixes.</para>
|
||||
@ -814,6 +815,9 @@
|
||||
hierarchy. This bug has been fixed (see security advisory
|
||||
FreeBSD-SA-01:40). &merged;</para>
|
||||
|
||||
<para>&os;'s TCP implementation has been made more resistant to
|
||||
SYN floods, by eliminating the RST segment normally sent when
|
||||
removing a connection from the listen queue.</para>
|
||||
</sect2>
|
||||
<sect2>
|
||||
<title>Userland Changes</title>
|
||||
@ -1408,6 +1412,12 @@
|
||||
be controlled by the <varname>diskcheckd_enable</varname> variable
|
||||
in &man.rc.conf.5;.</para>
|
||||
|
||||
<para>&man.fmt.1; has been rewritten; the rewrite fixes a number
|
||||
of bugs compared to its prior behavior.</para>
|
||||
|
||||
<para>&man.df.1; now takes a <option>-l</option> option to only
|
||||
display information about locally-mounted filesystems.</para>
|
||||
|
||||
<sect3>
|
||||
<title>Contributed Software</title>
|
||||
|
||||
@ -1504,6 +1514,10 @@
|
||||
<application>tcsh</application> has been updated to version
|
||||
6.10. &merged;</para>
|
||||
|
||||
<para>&man.traceroute.8; now takes its default maximum TTL value
|
||||
from the <varname>net.inet.ip.ttl</varname> sysctl
|
||||
variable.</para>
|
||||
|
||||
<sect4>
|
||||
<title>OpenSSH</title>
|
||||
|
||||
|
@ -396,8 +396,9 @@
|
||||
<para>&man.ipfw.8; now filters correctly in the presence of ECN bits in TCP
|
||||
segments. &merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now has a <option>-d</option> flag to prevent
|
||||
the display of dynamic firewall rules.</para>
|
||||
<para>&man.ipfw.8; will now avoid the display of dynamic
|
||||
firewall rules unless the <option>-d</option> flag is passed to
|
||||
it. The <option>-e</option> lists expired dynamic rules.</para>
|
||||
|
||||
<para>&man.bridge.4; and &man.dummynet.4; have received some
|
||||
enhancements and bug fixes.</para>
|
||||
@ -814,6 +815,9 @@
|
||||
hierarchy. This bug has been fixed (see security advisory
|
||||
FreeBSD-SA-01:40). &merged;</para>
|
||||
|
||||
<para>&os;'s TCP implementation has been made more resistant to
|
||||
SYN floods, by eliminating the RST segment normally sent when
|
||||
removing a connection from the listen queue.</para>
|
||||
</sect2>
|
||||
<sect2>
|
||||
<title>Userland Changes</title>
|
||||
@ -1408,6 +1412,12 @@
|
||||
be controlled by the <varname>diskcheckd_enable</varname> variable
|
||||
in &man.rc.conf.5;.</para>
|
||||
|
||||
<para>&man.fmt.1; has been rewritten; the rewrite fixes a number
|
||||
of bugs compared to its prior behavior.</para>
|
||||
|
||||
<para>&man.df.1; now takes a <option>-l</option> option to only
|
||||
display information about locally-mounted filesystems.</para>
|
||||
|
||||
<sect3>
|
||||
<title>Contributed Software</title>
|
||||
|
||||
@ -1504,6 +1514,10 @@
|
||||
<application>tcsh</application> has been updated to version
|
||||
6.10. &merged;</para>
|
||||
|
||||
<para>&man.traceroute.8; now takes its default maximum TTL value
|
||||
from the <varname>net.inet.ip.ttl</varname> sysctl
|
||||
variable.</para>
|
||||
|
||||
<sect4>
|
||||
<title>OpenSSH</title>
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user