freebsd-dev/sys/amd64
Warner Losh 173c0f9f5c Mitigate the stream.c attacks
o Drop all broadcast and multicast source addresses in tcp_input.
o Enable ICMP_BANDLIM in GENERIC.
o Change default to 200/s from 100/s.  This will still stop the attack, but
  is conservative enough to do this close to code freeze.

This is not the optimal patch for the problem, but is likely the least
intrusive patch that can be made for this.

Obtained from: Don Lewis and Matt Dillon.
Reviewed by: freebsd-security
2000-01-28 06:13:09 +00:00
..
amd64 Correctly initialise the available IRQ numbers in the APIC_IO case. 2000-01-26 01:32:51 +00:00
conf Mitigate the stream.c attacks 2000-01-28 06:13:09 +00:00
include Fixed the profiling version ALTENTRY(). Again. The previous version 2000-01-25 09:01:55 +00:00
isa Use device_printf() instead of device_print_prettyname(). 2000-01-25 21:39:20 +00:00
pci Clean up the cfgmech/pci_mechanism debris. The reason for the existance 2000-01-08 08:31:24 +00:00
Makefile Add soft updates to the set of things being tagged. Syntax cleanup. 2000-01-27 01:22:06 +00:00