Matthew N. Dodd
09139a4537
Implement support for RFC 3514 (The Security Flag in the IPv4 Header).
...
(See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt)
This fulfills the host requirements for userland support by
way of the setsockopt() IP_EVIL_INTENT message.
There are three sysctl tunables provided to govern system behavior.
net.inet.ip.rfc3514:
Enables support for rfc3514. As this is an
Informational RFC and support is not yet widespread
this option is disabled by default.
net.inet.ip.hear_no_evil
If set the host will discard all received evil packets.
net.inet.ip.speak_no_evil
If set the host will discard all transmitted evil packets.
The IP statistics counter 'ips_evil' (available via 'netstat') provides
information on the number of 'evil' packets recieved.
For reference, the '-E' option to 'ping' has been provided to demonstrate
and test the implementation.
2003-04-01 08:21:44 +00:00
..
2002-08-21 18:11:48 +00:00
2003-03-22 12:18:20 +00:00
2003-03-26 05:49:42 +00:00
2003-02-22 21:33:42 +00:00
2003-03-29 02:09:02 +00:00
2003-03-15 07:56:59 +00:00
2003-03-06 06:31:49 +00:00
2002-11-27 02:18:58 +00:00
2003-02-23 13:25:02 +00:00
2002-07-06 19:34:18 +00:00
2001-12-04 02:19:58 +00:00
2003-03-03 11:51:30 +00:00
2002-12-09 13:06:34 +00:00
2003-03-25 03:16:53 +00:00
2003-03-29 02:09:02 +00:00
2003-02-23 13:25:02 +00:00
2003-02-23 01:50:07 +00:00
2003-02-23 01:47:49 +00:00
2002-08-21 18:11:48 +00:00
2003-03-29 22:06:52 +00:00
2003-02-11 07:32:45 +00:00
2002-08-21 18:11:48 +00:00
2003-03-03 09:40:32 +00:00
2003-02-14 21:08:14 +00:00
2002-08-27 00:49:27 +00:00
2002-09-16 14:18:43 +00:00
2002-11-27 02:18:58 +00:00
2003-03-31 18:38:31 +00:00
2003-02-13 01:00:26 +00:00
2002-12-30 21:18:15 +00:00
2003-03-08 13:42:42 +00:00
2003-03-26 01:30:34 +00:00
2003-03-25 11:27:46 +00:00
2002-03-20 09:02:48 +00:00
2002-03-26 10:09:09 +00:00
2002-03-19 22:51:53 +00:00
2003-03-15 01:13:00 +00:00
2002-03-20 09:04:34 +00:00
2002-03-20 09:01:48 +00:00
2002-08-21 18:11:48 +00:00
2003-03-03 22:48:06 +00:00
2002-07-06 19:34:18 +00:00
2002-07-06 19:34:18 +00:00
2002-09-17 01:49:00 +00:00
2002-11-01 06:34:35 +00:00
2003-02-14 04:48:06 +00:00
2003-03-03 13:05:00 +00:00
2002-12-27 12:15:40 +00:00
2003-03-25 18:43:10 +00:00
2003-03-02 08:07:57 +00:00
2003-02-23 01:46:25 +00:00
2002-08-21 18:11:48 +00:00
2003-01-01 18:49:04 +00:00
2002-12-27 12:15:40 +00:00
2002-08-21 18:11:48 +00:00
2003-03-25 01:25:30 +00:00
2002-08-21 18:11:48 +00:00
2003-02-05 13:50:41 +00:00
2002-08-21 18:11:48 +00:00
2002-08-21 18:11:48 +00:00
2002-12-30 09:38:46 +00:00
2002-11-05 20:06:01 +00:00
2002-12-12 05:56:36 +00:00
2002-12-12 17:26:04 +00:00
2002-12-12 17:26:04 +00:00
2003-02-28 15:41:45 +00:00
2003-02-23 01:47:49 +00:00
2003-01-30 15:09:21 +00:00
2002-08-16 08:19:15 +00:00
2002-07-06 19:34:18 +00:00
2002-09-16 19:46:20 +00:00
2003-04-01 08:21:44 +00:00
2002-12-06 02:11:31 +00:00
2002-11-27 02:18:58 +00:00
2002-12-27 12:15:40 +00:00
2002-11-25 16:23:03 +00:00
2003-01-13 18:57:19 +00:00
2003-01-10 10:55:13 +00:00
2003-03-05 19:18:05 +00:00
2003-02-11 02:31:53 +00:00
2001-12-04 02:19:58 +00:00
2003-01-01 18:49:04 +00:00
2003-01-01 18:49:04 +00:00
2002-12-23 16:04:51 +00:00
2003-01-08 06:43:27 +00:00
2002-01-10 16:02:23 +00:00
2002-04-19 23:06:29 +00:00
2003-01-31 07:03:25 +00:00
2003-02-28 00:55:18 +00:00
2003-01-22 00:34:22 +00:00
2003-02-23 01:50:07 +00:00
2003-02-23 13:22:41 +00:00
2003-03-15 20:49:38 +00:00
2003-03-02 01:50:33 +00:00
2001-12-04 02:19:58 +00:00