Rui Paulo 1cf6e4f5ff Change the default port range for outgoing connections by introducing ...

IPPORT_EPHEMERALFIRST and IPPORT_EPHEMERALLAST with values
10000 and 65535 respectively.
The rationale behind is that it makes the attacker's life more
difficult if he/she wants to guess the ephemeral port range and
also lowers the probability of a port colision (described in
draft-ietf-tsvwg-port-randomization-01.txt).

While there, remove code duplication in in_pcbbind_setup().

Submitted by:	Fernando Gont <fernando at gont.com.ar>
Approved by:	njl (mentor)
Reviewed by:	silby, bms
Discussed on:	freebsd-net

2008-03-04 19:16:21 +00:00

..

amd64

Add support for automatic promotion of 4KB page mappings to 2MB page

2008-03-04 18:50:15 +00:00

arm

Convert to be a 2-clause bsd-only license.

2008-03-03 06:39:36 +00:00

boot

MFi386: revision 1.43

2008-02-29 05:06:06 +00:00

bsm

Merge OpenBSM 1.0 changes to src/sys/bsm:

2007-10-29 18:47:25 +00:00

cam

When probing a newly found device, don't automatically assume that the

2008-02-27 08:47:13 +00:00

cddl

Axe the 'thread' argument from VOP_ISLOCKED() and lockstatus() as it is

2008-02-25 18:45:57 +00:00

compat

Return ENOSYS instead of 0 for the unknown futex operations.

2008-03-02 14:00:50 +00:00

conf

Force an explicit dependency on opt_global.h for all module object files

2008-03-04 16:54:31 +00:00

contrib

Axe the 'thread' argument from VOP_ISLOCKED() and lockstatus() as it is

2008-02-25 18:45:57 +00:00

crypto

Make test00 compilable again.

2008-01-15 18:34:47 +00:00

ddb

Use dump_write() instead of direct calls to di->dumper() in textdumps.

2008-01-31 16:22:14 +00:00

dev

Support for Freescale integrated Three-Speed Ethernet Controller (TSEC).

2008-03-03 19:03:44 +00:00

fs

Replace lockmgr lock protecting nwfs vnode hash table with an sx lock.

2008-03-02 19:02:30 +00:00

gdb

Add support for kgdb's 'detach' command.

2008-02-29 01:57:20 +00:00

geom

Add support for VTOC8 labels (aka sun disk labels). When a label does

2008-03-02 00:52:49 +00:00

gnu

Introduce some functions in the vnode locks namespace and in the ffs

2008-02-24 16:38:58 +00:00

i4b

Spelling fix for interupt -> interrupt

2007-10-12 06:03:46 +00:00

i386

- Remove the old smp cpu topology specification with a new, more flexible

2008-03-02 07:58:42 +00:00

ia64

- Remove the old smp cpu topology specification with a new, more flexible

2008-03-02 07:58:42 +00:00

isa

Use cpu_spinwait() (i.e., "pause") when spinning on rdtsc during DELAY().

2008-01-17 18:59:38 +00:00

kern

Make it possible to continue working after calling doadump()

2008-03-04 07:39:31 +00:00

libkern

Add prototype for __cmpd2().

2008-02-23 22:40:05 +00:00

modules

Add KMOD target.

2008-03-03 03:34:52 +00:00

net

Use RTFREE_LOCKED() instead of rtfree() when releasing a reference on the

2008-02-13 16:57:58 +00:00

net80211

Fix adhoc mode to scan all available channels for a bss to join

2008-02-29 04:07:07 +00:00

netatalk

Annotate two possible bugs in a comment: (1) we allocate and explicitly

2007-11-20 18:50:54 +00:00

netatm

Disconnect netatm from the build as it is not MPSAFE and relies on

2007-07-14 21:49:24 +00:00

netgraph

Implement 128 items node name hash for faster name search.

2008-03-04 18:22:18 +00:00

netinet

Change the default port range for outgoing connections by introducing

2008-03-04 19:16:21 +00:00

netinet6

Rather than passing around a cached 'priv', pass in an ucred to

2008-02-02 14:11:31 +00:00

netipsec

Fix bugs when allocating and passing information of current lifetime and

2008-03-02 17:12:28 +00:00

netipx

Make tcpstates[] static, and make sure TCPSTATES is defined before

2007-07-30 11:06:42 +00:00

netnatm

s/destory/destroy/ (except for the code in contrib/).

2007-04-16 12:31:35 +00:00

netncp

- Handle buffer lock waiters count directly in the buffer cache instead

2008-03-01 19:47:50 +00:00

netsmb

- Handle buffer lock waiters count directly in the buffer cache instead

2008-03-01 19:47:50 +00:00

nfs

…

nfs4client

- Handle buffer lock waiters count directly in the buffer cache instead

2008-03-01 19:47:50 +00:00

nfsclient

Axe the 'thread' argument from VOP_ISLOCKED() and lockstatus() as it is

2008-02-25 18:45:57 +00:00

nfsserver

Fix the Giant leak in the nfsrv_remove().

2008-03-04 11:05:03 +00:00

opencrypto

Make ftruncate a 'struct file' operation rather than a vnode operation.

2008-01-07 20:05:19 +00:00

pc98

Merged from sys/dev/sio/sio.c revision 1.472

2008-02-29 05:09:15 +00:00

pccard

…

pci

Don't map memory/IO resource in device probe and just use PCI

2008-03-03 04:15:08 +00:00

powerpc

Also comment-out options MPC85XX. We don't define CCSRBAR_* without E500.

2008-03-04 03:05:53 +00:00

rpc

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

security

Rather than copying out the full audit trigger record, which includes

2008-03-02 21:34:17 +00:00

sparc64

- Remove the old smp cpu topology specification with a new, more flexible

2008-03-02 07:58:42 +00:00

sun4v

- Remove the old smp cpu topology specification with a new, more flexible

2008-03-02 07:58:42 +00:00

sys

- Remove the old smp cpu topology specification with a new, more flexible

2008-03-02 07:58:42 +00:00

tools

Introduce a standalone shell script for embedding MFS image.

2008-02-05 10:46:30 +00:00

ufs

Continue on-going campaign to replace lockmgr locks with sx locks where

2008-03-04 12:50:11 +00:00

vm

Make the vm_pmap field of struct vmspace the last field in the

2008-03-01 22:54:42 +00:00

Makefile

o Add boot, gdb, nfsserver and opencrypto dirs to CSCOPEDIRS; sort.

2008-01-23 08:50:34 +00:00