Geoff Rehmet 2e4e1b4c31 Slight tweak to tcp.blackhole to add optional behaviour to ...

drop any segment arriving at a closed port.
tcp.blackhole=1 - only drop SYN without RST
tcp.blackhole=2 - drop everything without RST
tcp.blackhole=0 - always send RST - default behaviour

This confuses nmap -sF or -sX or -sN quite badly.

1999-08-18 15:40:05 +00:00

..

libalias

Various man page cleanup:

1999-08-15 09:51:25 +00:00

fil.c

…

icmp_var.h

…

if_atm.c

…

if_atm.h

…

if_ether.c

Add sufficient braces to keep egcs happy about potentially ambiguous

1999-05-06 18:13:11 +00:00

if_ether.h

…

if_fddi.h

…

igmp_var.h

…

igmp.c

…

igmp.h

…

in_cksum.c

…

in_hostcache.c

…

in_hostcache.h

…

in_pcb.c

Correct a mistake in so_cred changes. In practice, I don't think that it

1999-07-12 18:58:23 +00:00

in_pcb.h

This Implements the mumbled about "Jail" feature.

1999-04-28 11:38:52 +00:00

in_proto.c

…

in_rmx.c

Add sysctl descriptions to many SYSCTL_XXXs

1999-05-03 23:57:32 +00:00

in_systm.h

…

in_var.h

…

in.c

Suser() simplification:

1999-04-27 11:18:52 +00:00

in.h

Make ipfw's logging more dynamic. Now, log will use the default limit

1999-08-01 16:57:24 +00:00

ip_auth.c

…

ip_auth.h

…

ip_compat.h

…

ip_divert.c

Suser() simplification:

1999-04-27 11:18:52 +00:00

ip_dummynet.c

Fix a printf() formatter to match its variable.

1999-08-17 22:10:00 +00:00

ip_dummynet.h

assorted dummynet cleanup:

1999-05-04 07:30:08 +00:00

ip_fil.c

…

ip_fil.h

…

ip_flow.c

Add sysctl descriptions to many SYSCTL_XXXs

1999-05-03 23:57:32 +00:00

ip_flow.h

…

ip_frag.c

…

ip_frag.h

…

ip_ftp_pxy.c

Add RCS strings to kernel ipfilter files.

1999-06-19 11:35:41 +00:00

ip_fw.c

Implement probabilistic rule match in ipfw. Each rule can be associated

1999-08-11 15:34:47 +00:00

ip_fw.h

Implement probabilistic rule match in ipfw. Each rule can be associated

1999-08-11 15:34:47 +00:00

ip_icmp.c

Add net.inet.icmp.log_redirect and net.inet.icmp.drop_redirect, for

1999-08-10 09:45:33 +00:00

ip_icmp.h

…

ip_input.c

Made net.inet.ip.intr_queue_maxlen writeable.

1999-05-27 12:20:33 +00:00

ip_log.c

…

ip_mroute.c

Add sufficient braces to keep egcs happy about potentially ambiguous

1999-05-06 18:13:11 +00:00

ip_mroute.h

…

ip_nat.c

…

ip_nat.h

…

ip_output.c

Free the dummynet descriptor in ip_dummynet, not in the called

1999-05-04 16:20:33 +00:00

ip_proxy.c

…

ip_proxy.h

…

ip_state.c

…

ip_state.h

…

ip_var.h

…

ip.h

…

ipl.h

Add RCS strings to kernel ipfilter files.

1999-06-19 11:35:41 +00:00

mlf_ipl.c

Add RCS strings to kernel ipfilter files.

1999-06-19 11:35:41 +00:00

raw_ip.c

Make ipfw's logging more dynamic. Now, log will use the default limit

1999-08-01 16:57:24 +00:00

tcp_debug.c

…

tcp_debug.h

…

tcp_fsm.h

…

tcp_input.c

Slight tweak to tcp.blackhole to add optional behaviour to

1999-08-18 15:40:05 +00:00

tcp_output.c

Added net.inet.tcp.path_mtu_discovery variable which when set to 0

1999-05-27 12:24:21 +00:00

tcp_reass.c

Slight tweak to tcp.blackhole to add optional behaviour to

1999-08-18 15:40:05 +00:00

tcp_seq.h

…

tcp_subr.c

Two new sysctls: net.inet.tcp.getcred and net.inet.udp.getcred. These take

1999-07-11 18:32:46 +00:00

tcp_timer.c

Add sysctl descriptions to many SYSCTL_XXXs

1999-05-03 23:57:32 +00:00

tcp_timer.h

…

tcp_timewait.c

Two new sysctls: net.inet.tcp.getcred and net.inet.udp.getcred. These take

1999-07-11 18:32:46 +00:00

tcp_usrreq.c

Plug a mbuf leak in tcp_usr_send(). pru_send() routines are expected

1999-06-04 02:27:06 +00:00

tcp_var.h

…

tcp.h

…

tcpip.h

…

udp_usrreq.c

Add net.inet.tcp.blackhole and net.inet.udp.blackhole

1999-08-17 12:17:53 +00:00

udp_var.h

This is the much-awaited cleaned up version of IPFW [ug]id support.

1999-06-19 18:43:33 +00:00

udp.h

…