freebsd-dev/sys/i386/conf
Warner Losh 173c0f9f5c Mitigate the stream.c attacks
o Drop all broadcast and multicast source addresses in tcp_input.
o Enable ICMP_BANDLIM in GENERIC.
o Change default to 200/s from 100/s.  This will still stop the attack, but
  is conservative enough to do this close to code freeze.

This is not the optimal patch for the problem, but is likely the least
intrusive patch that can be made for this.

Obtained from: Don Lewis and Matt Dillon.
Reviewed by: freebsd-security
2000-01-28 06:13:09 +00:00
..
GENERIC Mitigate the stream.c attacks 2000-01-28 06:13:09 +00:00
LINT Completely remove ATA_16BIT_ONLY, since this is done automatically 2000-01-27 19:28:15 +00:00
NEWCARD Removed bogus quotes and unmangled related contractions. 2000-01-24 05:38:55 +00:00
NOTES Completely remove ATA_16BIT_ONLY, since this is done automatically 2000-01-27 19:28:15 +00:00