d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2d610a5028
freebsd-dev/sys
History
Mike Silbersack 2d610a5028 Temporary feature: Runtime tuneable tcp initial sequence number 
generation scheme.  Users may now select between the currently used
OpenBSD algorithm and the older random positive increment method.

While the OpenBSD algorithm is more secure, it also breaks TIME_WAIT
handling; this is causing trouble for an increasing number of folks.

To switch between generation schemes, one sets the sysctl
net.inet.tcp.tcp_seq_genscheme.  0 = random positive increments,
1 = the OpenBSD algorithm.  1 is still the default.

Once a secure _and_ compatible algorithm is implemented, this sysctl
will be removed.

Reviewed by: jlemon
Tested by: numerous subscribers of -net
2001-07-08 02:20:47 +00:00
..
alpha Bracket call to vm_page_flag_set with required Giant lock/unlock. 2001-07-05 17:27:50 +00:00
amd64 Move vm_page_zero_idle() from machine-dependant sections to a 2001-07-05 01:32:42 +00:00
arm Don't need the .keep_me files. Obrien and I committed past each other. 2001-07-01 23:35:44 +00:00
boot Get rid of some constness warnings. 2001-06-24 12:08:47 +00:00
cam Check the void * argument in the AC_FOUND_DEV case against NULL. Whether 2001-07-04 05:22:42 +00:00
coda Warning fix: coda_fbsd.c:113: warning: unused variable `ret' 2001-06-15 00:02:27 +00:00
compat o Replace calls to p_can(..., P_CAN_xxx) with calls to p_canxxx(). 2001-07-05 17:10:46 +00:00
conf Fill paragraphs after previous commit. 2001-07-08 01:04:10 +00:00
contrib Merge FreeBSD-specific changes. 2001-06-29 20:19:59 +00:00
crypto properly check DES weak key. KAME PR 363. 2001-07-03 17:46:48 +00:00
ddb With this commit, I hereby pronounce gensetdefs past its use-by date. 2001-06-13 10:58:39 +00:00
dev Nuke the ACPI APIC driver. The ACPI CA infrastructure it depended on 2001-07-07 22:23:56 +00:00
fs o Replace calls to p_can(..., P_CAN_xxx) with calls to p_canxxx(). 2001-07-05 17:10:46 +00:00
geom
gnu Fix more mntvnode and vnode interlock order reversals. 2001-06-28 22:21:33 +00:00
i4b
i386 Move vm_page_zero_idle() from machine-dependant sections to a 2001-07-05 01:32:42 +00:00
ia64 Move vm_page_zero_idle() from machine-dependant sections to a 2001-07-05 01:32:42 +00:00
isa More cleanup when detaching. Clone device entries will now be 2001-07-04 22:10:33 +00:00
isofs/cd9660
kern Backout mwakeup, etc. 2001-07-06 01:16:43 +00:00
libkern
modules Ha! This time, I remembered the ACPI module. Update the sources list 2001-07-07 23:36:13 +00:00
net unbreak building kernel without option INET6 2001-07-05 14:42:54 +00:00
netatalk
netatm
netgraph Fix warning: (int/long mixup in printf) 2001-06-15 07:35:25 +00:00
netinet Temporary feature: Runtime tuneable tcp initial sequence number 2001-07-08 02:20:47 +00:00
netinet6 The m_free call in the ip6_fw_ctl_ptr == NULL case apparently 2001-07-07 19:58:45 +00:00
netipx
netkey Sync with recent KAME. 2001-06-11 12:39:29 +00:00
netnatm
netncp Fix warning: 203: implicit declaration of function `kernel_sysctlbyname' 2001-06-15 07:37:01 +00:00
netns
netsmb Remove bogus include. 2001-06-14 11:05:01 +00:00
nfs - Sort includes. 2001-07-04 20:14:59 +00:00
nfsclient - Sort includes. 2001-07-04 20:14:59 +00:00
nfsserver With Alfred's permission, remove vm_mtx in favor of a fine-grained approach 2001-07-04 16:20:28 +00:00
pc98 Merged from sys/i386/i386/machdep.c revisions 1.459 and 1.460. 2001-07-07 04:06:04 +00:00
pccard Cleanup some obsolete comments 2001-07-06 05:52:59 +00:00
pci Make these compile again by adding proc.h include for GIANT_REQUIRED 2001-07-05 21:28:47 +00:00
posix4 o Replace calls to p_can(..., P_CAN_xxx) with calls to p_canxxx(). 2001-07-05 17:10:46 +00:00
powerpc Move vm_page_zero_idle() from machine-dependant sections to a 2001-07-05 01:32:42 +00:00
rpc
sparc64/compile Obrien created this directory, but I didn't cvs add cvsignore 2001-07-01 23:37:03 +00:00
svr4
sys Backout mwakeup, etc. 2001-07-06 01:16:43 +00:00
tools
ufs With Alfred's permission, remove vm_mtx in favor of a fine-grained approach 2001-07-04 16:20:28 +00:00
vm Apply field bandages to the includes so compiles happen on alpha. 2001-07-05 06:13:44 +00:00
Makefile