freebsd-skq/sbin/ipfw
Michael Tuexen 665c8a2ee5 Add to ipfw support for sending an SCTP packet containing an ABORT chunk.
This is similar to the TCP case. where a TCP RST segment can be sent.

There is one limitation: When sending an ABORT in response to an incoming
packet, it should be tested if there is no ABORT chunk in the received
packet. Currently, it is only checked if the first chunk is an ABORT
chunk to avoid parsing the whole packet, which could result in a DOS attack.

Thanks to Timo Voelker for helping me to test this patch.
Reviewed by: bcr@ (man page part), ae@ (generic, non-SCTP part)
Differential Revision:	https://reviews.freebsd.org/D13239
2017-11-26 18:19:01 +00:00
..
altq.c
dummynet.c ipfw: dummynet: Add 'G' and 'g' suffix for bandwidth configuration/display 2017-06-23 14:00:28 +00:00
ipfw2.c Add to ipfw support for sending an SCTP packet containing an ABORT chunk. 2017-11-26 18:19:01 +00:00
ipfw2.h Add to ipfw support for sending an SCTP packet containing an ABORT chunk. 2017-11-26 18:19:01 +00:00
ipfw.8 Add to ipfw support for sending an SCTP packet containing an ABORT chunk. 2017-11-26 18:19:01 +00:00
ipv6.c In fill_ip6(), the value of the pointer av changes before it is 2017-04-23 21:17:59 +00:00
main.c Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00
Makefile Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00
Makefile.depend DIRDEPS_BUILD: Update dependencies. 2017-10-31 00:07:04 +00:00
nat64lsn.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
nat64stl.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
nat.c Code cleanup unused-but-set-variable spotted by gcc. 2015-08-25 15:32:08 +00:00
nptv6.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
tables.c Return 'errno' value from the table_do_modify_record(), it is expected 2017-10-13 11:01:33 +00:00