Paul Saab cf09195ba5 - Tighten up the Timestamp checks to prevent a spoofed segment from ...

setting ts_recent to an arbitrary value, stopping further
  communication between the two hosts.
- If the Echoed Timestamp is greater than the current time,
  fall back to the non RFC 1323 RTT calculation.

Submitted by:	Raja Mukerji (raja at moselle dot com)
Reviewed by:	Noritoshi Demizu, Mohan Srinivasan

2005-04-10 05:24:59 +00:00

..

libalias

natd core dumps when -reverse switch is used because of a bug in

2005-04-05 13:04:35 +00:00

accf_data.c

…

accf_http.c

…

icmp6.h

…

icmp_var.h

…

if_atm.c

…

if_atm.h

…

if_ether.c

Embrace with #ifdef DEV_CARP carp-related code.

2005-03-13 11:23:22 +00:00

if_ether.h

Add CARP (Common Address Redundancy Protocol), which allows multiple

2005-02-22 13:04:05 +00:00

igmp_var.h

…

igmp.c

deal with malloc failures

2005-03-26 22:20:22 +00:00

igmp.h

…

in_cksum.c

…

in_gif.c

…

in_gif.h

…

in_pcb.c

o Tweak the comment a bit.

2005-04-08 08:43:21 +00:00

in_pcb.h

…

in_proto.c

Add CARP (Common Address Redundancy Protocol), which allows multiple

2005-02-22 13:04:05 +00:00

in_rmx.c

…

in_systm.h

…

in_var.h

…

in.c

ifma_protospec is a pointer. Use NULL when assigning or compating it.

2005-03-20 14:31:45 +00:00

in.h

Add CARP (Common Address Redundancy Protocol), which allows multiple

2005-02-22 13:04:05 +00:00

ip6.h

…

ip_carp.c

When several carp interfaces are attached to Ethernet interface,

2005-03-30 11:44:43 +00:00

ip_carp.h

Add CARP (Common Address Redundancy Protocol), which allows multiple

2005-02-22 13:04:05 +00:00

ip_divert.c

…

ip_divert.h

…

ip_dummynet.c

Use ACTION_PTR(r) instead of (r->cmd + r->act_ofs).

2005-04-06 00:26:08 +00:00

ip_dummynet.h

…

ip_ecn.c

…

ip_ecn.h

…

ip_encap.c

…

ip_encap.h

…

ip_fastfwd.c

- Don't free mbuf, passed to interface output method if the latter

2005-03-29 13:43:09 +00:00

ip_fw2.c

Use NET_CALLOUT_MPSAFE macro.

2005-03-01 12:01:17 +00:00

ip_fw_pfil.c

When a packet has been reinjected into ipfw(4) after dummynet(4) processing

2005-04-06 14:00:33 +00:00

ip_fw.h

…

ip_gre.c

…

ip_gre.h

…

ip_icmp.c

…

ip_icmp.h

…

ip_id.c

…

ip_input.c

o Nano optimize ip_reass() code path for the first fragment: do not

2005-04-08 10:25:13 +00:00

ip_mroute.c

Use NET_CALLOUT_MPSAFE macro.

2005-03-01 12:01:17 +00:00

ip_mroute.h

…

ip_output.c

Bring back the full packet destination manipulation for 'ipfw fwd'

2005-02-22 17:40:40 +00:00

ip_var.h

…

ip.h

…

ipprotosw.h

…

pim_var.h

…

pim.h

…

raw_ip.c

eliminate extraneous null ptr checks

2005-03-29 01:10:46 +00:00

tcp_debug.c

…

tcp_debug.h

…

tcp_fsm.h

…

tcp_hostcache.c

…

tcp_input.c

- Tighten up the Timestamp checks to prevent a spoofed segment from

2005-04-10 05:24:59 +00:00

tcp_output.c

…

tcp_reass.c

- Tighten up the Timestamp checks to prevent a spoofed segment from

2005-04-10 05:24:59 +00:00

tcp_sack.c

When the rightmost SACK block expands, rcv_lastsack should be updated.

2005-04-10 05:20:10 +00:00

tcp_seq.h

- Tighten up the Timestamp checks to prevent a spoofed segment from

2005-04-10 05:24:59 +00:00

tcp_subr.c

- If the reassembly queue limit was reached or if we couldn't allocate

2005-04-10 05:21:29 +00:00

tcp_syncache.c

Use NET_CALLOUT_MPSAFE macro.

2005-03-01 12:01:17 +00:00

tcp_timer.c

…

tcp_timer.h

…

tcp_timewait.c

- If the reassembly queue limit was reached or if we couldn't allocate

2005-04-10 05:21:29 +00:00

tcp_usrreq.c

eliminate extraneous null ptr checks

2005-03-29 01:10:46 +00:00

tcp_var.h

Add limits on the number of elements in the sack scoreboard both

2005-03-09 23:14:10 +00:00

tcp.h

…

tcpip.h

…

udp_usrreq.c

eliminate extraneous null ptr checks

2005-03-29 01:10:46 +00:00

udp_var.h

…

udp.h

…