Axe TCP_RESTRICT_RST. It was never a particularly good idea except for a few
very specific scenarios, and now that we have had net.inet.tcp.blackhole for quite some time there is really no reason to use it any more. (last of three commits)
This commit is contained in:
parent
cc084f7587
commit
c59319bf1a
@ -132,12 +132,6 @@ SYSCTL_INT(_net_inet_tcp, OID_AUTO, drop_synfin, CTLFLAG_RW,
|
||||
&drop_synfin, 0, "Drop TCP packets with SYN+FIN set");
|
||||
#endif
|
||||
|
||||
#ifdef TCP_RESTRICT_RST
|
||||
static int restrict_rst = 0;
|
||||
SYSCTL_INT(_net_inet_tcp, OID_AUTO, restrict_rst, CTLFLAG_RW,
|
||||
&restrict_rst, 0, "Restrict RST emission");
|
||||
#endif
|
||||
|
||||
struct inpcbhead tcb;
|
||||
#define tcb6 tcb /* for KAME src sync over BSD*'s */
|
||||
struct inpcbinfo tcbinfo;
|
||||
@ -2303,13 +2297,8 @@ tcp_input(m, off0, proto)
|
||||
/* IPv6 anycast check is done at tcp6_input() */
|
||||
|
||||
/*
|
||||
* Perform bandwidth limiting (and RST blocking
|
||||
* if kernel is so configured.)
|
||||
* Perform bandwidth limiting.
|
||||
*/
|
||||
#ifdef TCP_RESTRICT_RST
|
||||
if (restrict_rst)
|
||||
goto drop;
|
||||
#endif
|
||||
if (badport_bandlim(rstreason) < 0)
|
||||
goto drop;
|
||||
|
||||
|
@ -132,12 +132,6 @@ SYSCTL_INT(_net_inet_tcp, OID_AUTO, drop_synfin, CTLFLAG_RW,
|
||||
&drop_synfin, 0, "Drop TCP packets with SYN+FIN set");
|
||||
#endif
|
||||
|
||||
#ifdef TCP_RESTRICT_RST
|
||||
static int restrict_rst = 0;
|
||||
SYSCTL_INT(_net_inet_tcp, OID_AUTO, restrict_rst, CTLFLAG_RW,
|
||||
&restrict_rst, 0, "Restrict RST emission");
|
||||
#endif
|
||||
|
||||
struct inpcbhead tcb;
|
||||
#define tcb6 tcb /* for KAME src sync over BSD*'s */
|
||||
struct inpcbinfo tcbinfo;
|
||||
@ -2303,13 +2297,8 @@ tcp_input(m, off0, proto)
|
||||
/* IPv6 anycast check is done at tcp6_input() */
|
||||
|
||||
/*
|
||||
* Perform bandwidth limiting (and RST blocking
|
||||
* if kernel is so configured.)
|
||||
* Perform bandwidth limiting.
|
||||
*/
|
||||
#ifdef TCP_RESTRICT_RST
|
||||
if (restrict_rst)
|
||||
goto drop;
|
||||
#endif
|
||||
if (badport_bandlim(rstreason) < 0)
|
||||
goto drop;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user