freebsd-dev/sys/netinet
Andre Oppermann 1600372b6b Ignore ICMP Source Quench messages for TCP sessions. Source Quench is
ineffective, depreciated and can be abused to degrade the performance
of active TCP sessions if spoofed.

Replace a bogus call to tcp_quench() in tcp_output() with the direct
equivalent tcpcb variable assignment.

Security:	draft-gont-tcpm-icmp-attacks-03.txt Section 7.1
MFC after:	3 days
2005-04-21 12:37:12 +00:00
..
libalias natd core dumps when -reverse switch is used because of a bug in 2005-04-05 13:04:35 +00:00
accf_data.c
accf_http.c
icmp6.h
icmp_var.h
if_atm.c
if_atm.h
if_ether.c
if_ether.h
igmp_var.h
igmp.c deal with malloc failures 2005-03-26 22:20:22 +00:00
igmp.h
in_cksum.c
in_gif.c
in_gif.h
in_pcb.c o Tweak the comment a bit. 2005-04-08 08:43:21 +00:00
in_pcb.h
in_proto.c
in_rmx.c
in_systm.h
in_var.h
in.c ifma_protospec is a pointer. Use NULL when assigning or compating it. 2005-03-20 14:31:45 +00:00
in.h
ip6.h
ip_carp.c Remove anti-LOR bandaid, it is not needed now. 2005-04-20 09:32:05 +00:00
ip_carp.h
ip_divert.c
ip_divert.h
ip_dummynet.c Make DUMMYNET compile without INET6 2005-04-19 10:12:21 +00:00
ip_dummynet.h Add IPv6 support to IPFW and Dummynet. 2005-04-18 18:35:05 +00:00
ip_ecn.c
ip_ecn.h
ip_encap.c
ip_encap.h
ip_fastfwd.c - Don't free mbuf, passed to interface output method if the latter 2005-03-29 13:43:09 +00:00
ip_fw2.c typo 2005-04-19 10:04:38 +00:00
ip_fw_pfil.c Add IPv6 support to IPFW and Dummynet. 2005-04-18 18:35:05 +00:00
ip_fw.h Add IPv6 support to IPFW and Dummynet. 2005-04-18 18:35:05 +00:00
ip_gre.c
ip_gre.h
ip_icmp.c
ip_icmp.h
ip_id.c
ip_input.c o Nano optimize ip_reass() code path for the first fragment: do not 2005-04-08 10:25:13 +00:00
ip_mroute.c
ip_mroute.h
ip_output.c
ip_var.h
ip.h
ipprotosw.h
pim_var.h
pim.h
raw_ip.c eliminate extraneous null ptr checks 2005-03-29 01:10:46 +00:00
tcp_debug.c
tcp_debug.h
tcp_fsm.h
tcp_hostcache.c
tcp_input.c Fix for a TCP SACK bug where more than (win/2) bytes could have been 2005-04-14 20:09:52 +00:00
tcp_output.c Ignore ICMP Source Quench messages for TCP sessions. Source Quench is 2005-04-21 12:37:12 +00:00
tcp_reass.c Fix for a TCP SACK bug where more than (win/2) bytes could have been 2005-04-14 20:09:52 +00:00
tcp_sack.c Rewrite of tcp_update_sack_list() to make it simpler and more readable 2005-04-18 18:10:56 +00:00
tcp_seq.h - Tighten up the Timestamp checks to prevent a spoofed segment from 2005-04-10 05:24:59 +00:00
tcp_subr.c Ignore ICMP Source Quench messages for TCP sessions. Source Quench is 2005-04-21 12:37:12 +00:00
tcp_syncache.c
tcp_timer.c
tcp_timer.h
tcp_timewait.c Ignore ICMP Source Quench messages for TCP sessions. Source Quench is 2005-04-21 12:37:12 +00:00
tcp_usrreq.c eliminate extraneous null ptr checks 2005-03-29 01:10:46 +00:00
tcp_var.h Ignore ICMP Source Quench messages for TCP sessions. Source Quench is 2005-04-21 12:37:12 +00:00
tcp.h
tcpip.h
udp_usrreq.c eliminate extraneous null ptr checks 2005-03-29 01:10:46 +00:00
udp_var.h
udp.h