d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
74f471aa5c
freebsd-skq/sys
History
rpaulo 74f471aa5c Change the default port range for outgoing connections by introducing 
IPPORT_EPHEMERALFIRST and IPPORT_EPHEMERALLAST with values
10000 and 65535 respectively.
The rationale behind is that it makes the attacker's life more
difficult if he/she wants to guess the ephemeral port range and
also lowers the probability of a port colision (described in
draft-ietf-tsvwg-port-randomization-01.txt).

While there, remove code duplication in in_pcbbind_setup().

Submitted by:	Fernando Gont <fernando at gont.com.ar>
Approved by:	njl (mentor)
Reviewed by:	silby, bms
Discussed on:	freebsd-net
2008-03-04 19:16:21 +00:00
..
amd64 Add support for automatic promotion of 4KB page mappings to 2MB page 2008-03-04 18:50:15 +00:00
arm Convert to be a 2-clause bsd-only license. 2008-03-03 06:39:36 +00:00
boot MFi386: revision 1.43 2008-02-29 05:06:06 +00:00
bsm Merge OpenBSM 1.0 changes to src/sys/bsm: 2007-10-29 18:47:25 +00:00
cam When probing a newly found device, don't automatically assume that the 2008-02-27 08:47:13 +00:00
cddl Axe the 'thread' argument from VOP_ISLOCKED() and lockstatus() as it is 2008-02-25 18:45:57 +00:00
compat Return ENOSYS instead of 0 for the unknown futex operations. 2008-03-02 14:00:50 +00:00
conf Force an explicit dependency on opt_global.h for all module object files 2008-03-04 16:54:31 +00:00
contrib Axe the 'thread' argument from VOP_ISLOCKED() and lockstatus() as it is 2008-02-25 18:45:57 +00:00
crypto Make test00 compilable again. 2008-01-15 18:34:47 +00:00
ddb Use dump_write() instead of direct calls to di->dumper() in textdumps. 2008-01-31 16:22:14 +00:00
dev Support for Freescale integrated Three-Speed Ethernet Controller (TSEC). 2008-03-03 19:03:44 +00:00
fs Replace lockmgr lock protecting nwfs vnode hash table with an sx lock. 2008-03-02 19:02:30 +00:00
gdb Add support for kgdb's 'detach' command. 2008-02-29 01:57:20 +00:00
geom Add support for VTOC8 labels (aka sun disk labels). When a label does 2008-03-02 00:52:49 +00:00
gnu Introduce some functions in the vnode locks namespace and in the ffs 2008-02-24 16:38:58 +00:00
i4b Spelling fix for interupt -> interrupt 2007-10-12 06:03:46 +00:00
i386 - Remove the old smp cpu topology specification with a new, more flexible 2008-03-02 07:58:42 +00:00
ia64 - Remove the old smp cpu topology specification with a new, more flexible 2008-03-02 07:58:42 +00:00
isa Use cpu_spinwait() (i.e., "pause") when spinning on rdtsc during DELAY(). 2008-01-17 18:59:38 +00:00
kern Make it possible to continue working after calling doadump() 2008-03-04 07:39:31 +00:00
libkern Add prototype for __cmpd2(). 2008-02-23 22:40:05 +00:00
modules Add KMOD target. 2008-03-03 03:34:52 +00:00
net Use RTFREE_LOCKED() instead of rtfree() when releasing a reference on the 2008-02-13 16:57:58 +00:00
net80211 Fix adhoc mode to scan all available channels for a bss to join 2008-02-29 04:07:07 +00:00
netatalk Annotate two possible bugs in a comment: (1) we allocate and explicitly 2007-11-20 18:50:54 +00:00
netatm Disconnect netatm from the build as it is not MPSAFE and relies on 2007-07-14 21:49:24 +00:00
netgraph Implement 128 items node name hash for faster name search. 2008-03-04 18:22:18 +00:00
netinet Change the default port range for outgoing connections by introducing 2008-03-04 19:16:21 +00:00
netinet6 Rather than passing around a cached 'priv', pass in an ucred to 2008-02-02 14:11:31 +00:00
netipsec Fix bugs when allocating and passing information of current lifetime and 2008-03-02 17:12:28 +00:00
netipx Make tcpstates[] static, and make sure TCPSTATES is defined before 2007-07-30 11:06:42 +00:00
netnatm s/destory/destroy/ (except for the code in contrib/). 2007-04-16 12:31:35 +00:00
netncp - Handle buffer lock waiters count directly in the buffer cache instead 2008-03-01 19:47:50 +00:00
netsmb - Handle buffer lock waiters count directly in the buffer cache instead 2008-03-01 19:47:50 +00:00
nfs
nfs4client - Handle buffer lock waiters count directly in the buffer cache instead 2008-03-01 19:47:50 +00:00
nfsclient Axe the 'thread' argument from VOP_ISLOCKED() and lockstatus() as it is 2008-02-25 18:45:57 +00:00
nfsserver Fix the Giant leak in the nfsrv_remove(). 2008-03-04 11:05:03 +00:00
opencrypto Make ftruncate a 'struct file' operation rather than a vnode operation. 2008-01-07 20:05:19 +00:00
pc98 Merged from sys/dev/sio/sio.c revision 1.472 2008-02-29 05:09:15 +00:00
pccard
pci Don't map memory/IO resource in device probe and just use PCI 2008-03-03 04:15:08 +00:00
powerpc Also comment-out options MPC85XX. We don't define CCSRBAR_* without E500. 2008-03-04 03:05:53 +00:00
rpc Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
security Rather than copying out the full audit trigger record, which includes 2008-03-02 21:34:17 +00:00
sparc64 - Remove the old smp cpu topology specification with a new, more flexible 2008-03-02 07:58:42 +00:00
sun4v - Remove the old smp cpu topology specification with a new, more flexible 2008-03-02 07:58:42 +00:00
sys - Remove the old smp cpu topology specification with a new, more flexible 2008-03-02 07:58:42 +00:00
tools Introduce a standalone shell script for embedding MFS image. 2008-02-05 10:46:30 +00:00
ufs Continue on-going campaign to replace lockmgr locks with sx locks where 2008-03-04 12:50:11 +00:00
vm Make the vm_pmap field of struct vmspace the last field in the 2008-03-01 22:54:42 +00:00
Makefile o Add boot, gdb, nfsserver and opencrypto dirs to CSCOPEDIRS; sort. 2008-01-23 08:50:34 +00:00