freebsd-nq/lib/libpfctl
Kristof Provost 6049ee60e0 libpfctl: improve syncookie watermark calculation
Ensure that we always pass sane limits for the high and low watermark
values.
This is especially important if users do something silly, like set the
state limit to 1. In that case we wound up calculating 0/0 as a limit,
which gets rejected by the kernel.

While here also shift the calculation to use uint64_t, so we don't end
up with overflows (and subsequently higher low than high values) with
very large state limits.

Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D36497
2022-09-12 09:32:02 +02:00
..
libpfctl.c libpfctl: improve syncookie watermark calculation 2022-09-12 09:32:02 +02:00
libpfctl.h pf: support matching on tags for Ethernet rules 2022-06-20 10:16:20 +02:00
Makefile libpfct: Fix PIC flag 2021-04-17 22:10:13 +02:00