Gleb Smirnoff 1817be481b Add net.inet6.ip6.source_address_validation ... Drop packets arriving from the network that have our source IPv6 address. If maliciously crafted they can create evil effects like an RST exchange between two of our listening TCP ports. Such packets just can't be legitimate. Enable the tunable by default. Long time due for a modern Internet host. Reviewed by: melifaro, donner, kp Differential revision: https://reviews.freebsd.org/D32915		2021-11-12 09:01:40 -08:00
..
dest6.c
frag6.c	frag6: do less work in frag6_slowtimo if possible	2021-08-14 18:51:00 +02:00
icmp6.c	lltable: Add support for "child" LLEs holding encap for IPv4oIPv6 entries.	2021-08-21 17:34:35 +00:00
icmp6.h
in6_cksum.c	net: clean up empty lines in .c and .h files	2020-09-01 21:19:14 +00:00
in6_fib_algo.c	Fix dpdk/ldradix fib lookup algorithm preference calculation.	2021-03-07 22:17:53 +00:00
in6_fib.c	Fix unused-function waring when compiling with FIB_ALGO.	2021-01-30 23:25:56 +00:00
in6_fib.h	Add modular fib lookup framework.	2020-12-25 11:33:17 +00:00
in6_gif.c	net: Introduce IPV6_DSCP(), IPV6_ECN() and IPV6_TRAFFIC_CLASS() macros	2021-03-04 20:56:48 +01:00
in6_ifattach.c	nd6: Mark several callouts as MPSAFE	2021-08-09 13:27:52 -04:00
in6_ifattach.h
in6_jail.c
in6_mcast.c	Fix panic in IPv6 multicast code.	2021-08-06 12:57:59 +03:00
in6_pcb.c	net: Allow binding of unspecified address without address existance	2021-10-20 19:25:51 -04:00
in6_pcb.h	Filter TCP connections to SO_REUSEPORT_LB listen sockets by NUMA domain	2020-12-19 22:04:46 +00:00
in6_pcbgroup.c
in6_proto.c	inet6(4): add a missing IPPROTO_ETHERIP entry	2021-08-27 17:14:35 +09:00
in6_rmx.c	Introduce scalable route multipath.	2020-10-03 10:47:17 +00:00
in6_rss.c	Implement flowid calculation for outbound connections to balance	2020-10-18 17:15:47 +00:00
in6_rss.h	Implement flowid calculation for outbound connections to balance	2020-10-18 17:15:47 +00:00
in6_src.c	Move in6_pcbsetport() to in6_pcb.c	2021-10-18 10:19:03 -07:00
in6_var.h	Remove per-packet ifa refcounting from IPv6 fast path.	2021-02-15 22:33:12 +00:00
in6.c	Add in_localip_fib(), in6_localip_fib().	2021-11-12 08:59:42 -08:00
in6.h	Add in_localip_fib(), in6_localip_fib().	2021-11-12 08:59:42 -08:00
ip6_ecn.h
ip6_fastfwd.c	net: clean up empty lines in .c and .h files	2020-09-01 21:19:14 +00:00
ip6_forward.c	ipv6: quit dropping packets looping back on p2p interfaces	2020-08-31 01:45:48 +00:00
ip6_gre.c
ip6_id.c
ip6_input.c	Add net.inet6.ip6.source_address_validation	2021-11-12 09:01:40 -08:00
ip6_mroute.c	ip6mrouter: Make the expiration callout MPSAFE	2021-09-07 11:19:29 -04:00
ip6_mroute.h
ip6_output.c	ipv6: Fix getsockopt() for some IPPROTO_IPV6 level socket options	2021-08-09 09:29:13 +02:00
ip6_var.h
ip6.h
ip6protosw.h
ip_fw_nat64.h
ip_fw_nptv6.h	net: clean up empty lines in .c and .h files	2020-09-01 21:19:14 +00:00
mld6_var.h
mld6.c	net: clean up empty lines in .c and .h files	2020-09-01 21:19:14 +00:00
mld6.h
nd6_nbr.c	nd6: Make the DAD callout MPSAFE	2021-09-07 11:19:29 -04:00
nd6_rtr.c	lltable: fix crash introduced in c541bd368f.	2021-08-22 08:49:18 +00:00
nd6.c	inet6(4): Fix a few common typos in source code comments	2021-08-28 18:53:59 +02:00
nd6.h	lltable: Add support for "child" LLEs holding encap for IPv4oIPv6 entries.	2021-08-21 17:34:35 +00:00
pim6_var.h
pim6.h
raw_ip6.c	socket: Implement SO_RERROR	2021-07-28 09:35:09 -07:00
raw_ip6.h
route6.c
scope6_var.h	Make net.inet6.ip6.deembed_scopeid behaviour default & remove sysctl.	2020-08-15 11:37:44 +00:00
scope6.c	net: clean up empty lines in .c and .h files	2020-09-01 21:19:14 +00:00
sctp6_usrreq.c	sctp: Tighten up locking around sctp_aloc_assoc()	2021-09-11 10:15:21 -04:00
sctp6_var.h
send.c	socket: Implement SO_RERROR	2021-07-28 09:35:09 -07:00
send.h
tcp6_var.h	tcp: add support for TCP over UDP	2021-04-18 16:16:42 +02:00
udp6_usrreq.c	blackhole(4): disable for locally originated TCP/UDP packets	2021-11-03 13:02:44 -07:00
udp6_var.h