Matthew N. Dodd 09139a4537 Implement support for RFC 3514 (The Security Flag in the IPv4 Header).
(See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt)

This fulfills the host requirements for userland support by
way of the setsockopt() IP_EVIL_INTENT message.

There are three sysctl tunables provided to govern system behavior.

	net.inet.ip.rfc3514:

		Enables support for rfc3514.  As this is an
		Informational RFC and support is not yet widespread
		this option is disabled by default.

	net.inet.ip.hear_no_evil

		 If set the host will discard all received evil packets.

	net.inet.ip.speak_no_evil

		If set the host will discard all transmitted evil packets.

The IP statistics counter 'ips_evil' (available via 'netstat') provides
information on the number of 'evil' packets recieved.

For reference, the '-E' option to 'ping' has been provided to demonstrate
and test the implementation.
2003-04-01 08:21:44 +00:00
..
2003-03-26 05:49:42 +00:00
2003-03-29 02:09:02 +00:00
2002-07-06 19:34:18 +00:00
2001-12-04 02:19:58 +00:00
2003-03-03 11:51:30 +00:00
2002-12-09 13:06:34 +00:00
2003-03-25 03:16:53 +00:00
2003-03-29 02:09:02 +00:00
2003-02-23 01:50:07 +00:00
2003-02-23 01:47:49 +00:00
2003-02-11 07:32:45 +00:00
2003-03-26 01:30:34 +00:00
2003-03-25 11:27:46 +00:00
2002-03-19 22:51:53 +00:00
2003-03-03 22:48:06 +00:00
2002-07-06 19:34:18 +00:00
2002-07-06 19:34:18 +00:00
2002-12-27 12:15:40 +00:00
2002-12-27 12:15:40 +00:00
2003-02-05 13:50:41 +00:00
2003-02-23 01:47:49 +00:00
2002-07-06 19:34:18 +00:00
2002-12-27 12:15:40 +00:00
2003-03-05 19:18:05 +00:00
2003-02-11 02:31:53 +00:00
2001-12-04 02:19:58 +00:00
2003-01-08 06:43:27 +00:00
2002-04-19 23:06:29 +00:00
2003-02-28 00:55:18 +00:00
2003-02-23 01:50:07 +00:00
2003-02-23 13:22:41 +00:00
2001-12-04 02:19:58 +00:00