d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
832d1bd181
freebsd-skq/sys
History
andre 832d1bd181 Provide the sysctl net.inet.ip.process_options to control the processing 
of IP options.

 net.inet.ip.process_options=0  Ignore IP options and pass packets unmodified.
 net.inet.ip.process_options=1  Process all IP options (default).
 net.inet.ip.process_options=2  Reject all packets with IP options with ICMP
  filter prohibited message.

This sysctl affects packets destined for the local host as well as those
only transiting through the host (routing).

IP options do not have any legitimate purpose anymore and are only used
to circumvent firewalls or to exploit certain behaviours or bugs in TCP/IP
stacks.

Reviewed by:	sam (mentor)
2004-05-06 18:46:03 +00:00
..
alpha When a denormal underflows to zero, raise an underflow exception. 2004-05-06 09:36:11 +00:00
amd64 Make unnecessary globals static and remove unused includes. 2004-05-06 02:18:58 +00:00
arm Don't declare osigset_t, as it is done in sys/_sigset.h. 2004-05-04 22:38:22 +00:00
boot Convert block comments into C-style that is understood by cpp(1). 2004-04-29 18:58:38 +00:00
cam Quirk for Neuros USB audio device. 2004-05-02 19:24:23 +00:00
coda
compat Small timer cleanups: 2004-04-30 20:51:55 +00:00
conf Detach i386/isa/elcr.c. 2004-05-06 13:49:53 +00:00
contrib Add sys/types.h for both kernel and user compiles. 2004-05-05 20:02:02 +00:00
crypto
ddb
dev Rename acpi_cpu to cpu. Change the probe routine to early on reject 2004-05-06 17:25:23 +00:00
fs Make vm_page's PG_ZERO flag immutable between the time of the page's 2004-05-06 05:03:23 +00:00
geom Close some small wakeup<->msleep races. 2004-05-05 12:30:41 +00:00
gnu
i4b
i386 Move the CPU newbus attachment to i386 legacy. The acpi_cpu device will 2004-05-06 15:54:02 +00:00
ia64 Make unnecessary globals static and remove unused includes. 2004-05-06 02:18:58 +00:00
isa - The i8254 uses IRQ 0, not IRQ 8. Correct i8254_intsrc to reference the 2004-04-27 20:03:26 +00:00
isofs/cd9660
kern Move the CPU newbus attachment to i386 legacy. The acpi_cpu device will 2004-05-06 15:54:02 +00:00
libkern Fixed some style bugs (unsorting of prototypes in previous commit, and 2004-05-05 15:12:55 +00:00
modules Add support for Cronyx Tau-PCI adapters. 2004-05-05 16:14:00 +00:00
net Add route.h to pick up the rt_ifmsg() declaration. 2004-05-04 02:39:41 +00:00
net80211 Link state change notification of ethernet media to the routing socket. 2004-05-05 15:48:06 +00:00
netatalk Remove redundant call to soisdisconnected() from ddp_abort(), as it 2004-05-05 03:34:37 +00:00
netatm
netgraph Fix a memory leak in ng_get_string_token. A dynamically-allocated 2004-04-29 01:37:11 +00:00
netinet Provide the sysctl net.inet.ip.process_options to control the processing 2004-05-06 18:46:03 +00:00
netinet6
netipsec use correct address for SADB_EXT_ADDRESS_DST in key_do_allocsa_policy 2004-05-03 05:15:53 +00:00
netipx
netkey
netnatm
netncp
netsmb
nfs
nfs4client
nfsclient Make vm_page's PG_ZERO flag immutable between the time of the page's 2004-05-06 05:03:23 +00:00
nfsserver
opencrypto
pc98 Mereged from sys/dev/sio/sio.c revision 1.429. 2004-05-06 13:16:45 +00:00
pccard
pci Remove old cy driver files. They have been repo-copied to sys/dev/cy and 2004-05-02 05:38:49 +00:00
posix4
powerpc Add option GEOM_GPT. This brings the ability to have a large number of 2004-05-02 20:40:19 +00:00
rpc
security If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tag 2004-05-03 23:37:48 +00:00
sparc64 Fix bug introduced in revision 1.9; in nexus_probe_nomatch() get device name 2004-05-04 22:31:16 +00:00
sys Name the pri argument to cv_broadcastpri() to match the existing style of 2004-05-05 21:57:44 +00:00
tools
ufs Revert previous change to this file because it breaks some 2004-04-29 15:10:42 +00:00
vm Make vm_page's PG_ZERO flag immutable between the time of the page's 2004-05-06 05:03:23 +00:00
Makefile