d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
e72fdee732
freebsd-skq/sbin
History
mdodd e72fdee732 Implement support for RFC 3514 (The Security Flag in the IPv4 Header). 
(See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt)

This fulfills the host requirements for userland support by
way of the setsockopt() IP_EVIL_INTENT message.

There are three sysctl tunables provided to govern system behavior.

	net.inet.ip.rfc3514:

		Enables support for rfc3514.  As this is an
		Informational RFC and support is not yet widespread
		this option is disabled by default.

	net.inet.ip.hear_no_evil

		 If set the host will discard all received evil packets.

	net.inet.ip.speak_no_evil

		If set the host will discard all transmitted evil packets.

The IP statistics counter 'ips_evil' (available via 'netstat') provides
information on the number of 'evil' packets recieved.

For reference, the '-E' option to 'ping' has been provided to demonstrate
and test the implementation.
2003-04-01 08:21:44 +00:00
..
adjkerntz s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
atacontrol - Add a new ioctl to get the maximum number of ATA channels. 2003-03-22 12:18:20 +00:00
atm - Fix function declarations. 2003-03-26 05:49:42 +00:00
badsect Remove unused variable to make badsect WARNS=2 clean. 2003-02-22 21:33:42 +00:00
bsdlabel Small mdoc fix 2003-03-29 02:09:02 +00:00
camcontrol Fixed (soon might be fatal) -Wformat warnings. 2003-03-15 07:56:59 +00:00
ccdconfig Don't pick the name out of the devstat member of the ccd softc, it will 2003-03-06 06:31:49 +00:00
clri Create a new 32-bit fs_flags word in the superblock. Add code to move 2002-11-27 02:18:58 +00:00
comcontrol These are WARNS=2 clean, try to keep them that way. 2003-02-23 13:25:02 +00:00
conscontrol The .Nm utility 2002-07-06 19:34:18 +00:00
cxconfig Default to WARNS=2. 2001-12-04 02:19:58 +00:00
devd mdoc(7) police: Revision. 2003-03-03 11:51:30 +00:00
devfs mdoc(7) police: markup nits. 2002-12-09 13:06:34 +00:00
dhclient Hook omshell(1) up to the build. 2003-03-25 03:16:53 +00:00
disklabel Small mdoc fix 2003-03-29 02:09:02 +00:00
dmesg These are WARNS=2 clean, try to keep them that way. 2003-02-23 13:25:02 +00:00
dump Sort options. 2003-02-23 01:50:07 +00:00
dumpfs mdoc(7) police: markup laundry. 2003-02-23 01:47:49 +00:00
dumpon s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
fdisk Use default geometry in case the device doesn't provide one: 2003-03-29 22:06:52 +00:00
fdisk_pc98 MFi386: Use DIOCGPC98 ioctl. 2003-02-11 07:32:45 +00:00
ffsinfo s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
fsck Strip out bogus difference from when this came from NetBSD: transliterating 2003-03-03 09:40:32 +00:00
fsck_ffs Correct lines incorrectly added to the copyright message. Add missing period. 2003-02-14 21:08:14 +00:00
fsck_msdosfs Fix some 'SYNOPSIS' and 'usage' messages. 2002-08-27 00:49:27 +00:00
fsdb I forgot fsdb was still sharing files with fsck. 2002-09-16 14:18:43 +00:00
fsirand Create a new 32-bit fs_flags word in the superblock. Add code to move 2002-11-27 02:18:58 +00:00
gbde Use new GEOM OAM. Kernels have supported this for a number of days, so 2003-03-31 18:38:31 +00:00
gpt Show the paritition types that we recognize in human readable format. eg: 2003-02-13 01:00:26 +00:00
growfs Fix typos, mostly s/ an / a / where appropriate and a few s/an/and/ 2002-12-30 21:18:15 +00:00
ifconfig Uncomment the description of the ipdst parameter, but refer to IPX 2003-03-08 13:42:42 +00:00
init There are 5 securelevels, not 4. 2003-03-26 01:30:34 +00:00
ip6fw Make -N option work. 2003-03-25 11:27:46 +00:00
ipf * add extra -I path to get the "matching" header files. 2002-03-20 09:02:48 +00:00
ipfs add extra include path to get .h files from source being used to compile 2002-03-26 10:09:09 +00:00
ipfstat Hopefully fix make world. 2002-03-19 22:51:53 +00:00
ipfw Add a 'verrevpath' option that verifies the interface that a packet 2003-03-15 01:13:00 +00:00
ipmon * add extra -I path to get the "matching" header files. (and split the one 2002-03-20 09:04:34 +00:00
ipnat * need to compile printnat.c now that this function is in a separate .c file 2002-03-20 09:01:48 +00:00
kldconfig s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
kldload Add an xref to kldconfig(8). 2003-03-03 22:48:06 +00:00
kldstat The .Nm utility 2002-07-06 19:34:18 +00:00
kldunload The .Nm utility 2002-07-06 19:34:18 +00:00
ldconfig Initiate deorbit burn for the i386-only a.out related support. Moves are 2002-09-17 01:49:00 +00:00
mca o Replace 'struct uuid' with 'uuid_t', 2002-11-01 06:34:35 +00:00
md5 Improvements to md5.c so that it uses getrusage to time 2003-02-14 04:48:06 +00:00
mdconfig Add a "-S sectorsize" option to enable Kirk to find a bug :-) 2003-03-03 13:05:00 +00:00
mdmfs english(4) police. 2002-12-27 12:15:40 +00:00
mknod Remove some more MAKEDEV information. 2003-03-25 18:43:10 +00:00
mksnap_ffs Close out a possible race where anybody in group operator could 2003-03-02 08:07:57 +00:00
mount mdoc(7) police: kill unnecessary xref. 2003-02-23 01:46:25 +00:00
mount_cd9660 s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
mount_ext2fs Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
mount_hpfs english(4) police. 2002-12-27 12:15:40 +00:00
mount_msdosfs s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
mount_nfs Add mount options 'noinet4' and 'noinet6' which prevent using those 2003-03-25 01:25:30 +00:00
mount_ntfs s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
mount_nullfs The .Xr utility 2003-02-05 13:50:41 +00:00
mount_nwfs s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
mount_portalfs s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
mount_smbfs This really isn't WARNS clean. 2002-12-30 09:38:46 +00:00
mount_std Take sizeof() the right string for fspath's iovec. The old string was the 2002-11-05 20:06:01 +00:00
mount_udf mount_udf(8) is currently not in 4.X, so obviously it did not first appear 2002-12-12 05:56:36 +00:00
mount_umapfs Uniformly refer to a file system as "file system". 2002-12-12 17:26:04 +00:00
mount_unionfs Uniformly refer to a file system as "file system". 2002-12-12 17:26:04 +00:00
natd Don't pretend natd(8) doesn't work with ppp(8) interfaces. 2003-02-28 15:41:45 +00:00
newfs mdoc(7) police: markup laundry. 2003-02-23 01:47:49 +00:00
newfs_msdos Additional PC98 option is not needed. 2003-01-30 15:09:21 +00:00
nfsiod No need to include sys/time.h, this unbreaks a c89 warning about long long 2002-08-16 08:19:15 +00:00
nologin The .Nm utility 2002-07-06 19:34:18 +00:00
nos-tun Don't depend on <sys/types.h> pollution in <fcntl.h>. Sort includes. 2002-09-16 19:46:20 +00:00
ping Implement support for RFC 3514 (The Security Flag in the IPv4 Header). 2003-04-01 08:21:44 +00:00
ping6 corrected buffer lengths for memset() 2002-12-06 02:11:31 +00:00
quotacheck Create a new 32-bit fs_flags word in the superblock. Add code to move 2002-11-27 02:18:58 +00:00
raidctl english(4) police. 2002-12-27 12:15:40 +00:00
rcorder mdoc(7) police: Fixed markup now that it was taken out of vendor branch. 2002-11-25 16:23:03 +00:00
reboot Add the /boot prefix. I forgot this when updating the location. 2003-01-13 18:57:19 +00:00
restore Add TAPE to the ENVIRONMENT section. 2003-01-10 10:55:13 +00:00
route Kill #ifdef NS code 2003-03-05 19:18:05 +00:00
routed Use srandomdev() for FreeBSD 2003-02-11 02:31:53 +00:00
rtsol Default to WARNS=2. 2001-12-04 02:19:58 +00:00
savecore Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
setkey Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
shutdown Fixed the abuses of .Ql visible on stderr in troff mode. 2002-12-23 16:04:51 +00:00
slattach Change this: 2003-01-08 06:43:27 +00:00
spppcontrol mdoc(7) police: tidy up the markup. 2002-01-10 16:02:23 +00:00
startslip Use `The .Nm utility' 2002-04-19 23:06:29 +00:00
sunlabel Add sunlabel, a more or less drop in replacement for bsd^H^H^Hdisklabel(8) 2003-01-31 07:03:25 +00:00
swapon Spell "utilities" correctly. 2003-02-28 00:55:18 +00:00
sysctl Fix what I think is an off-by-one in certain worst-case scenarios 2003-01-22 00:34:22 +00:00
tunefs Sort options. 2003-02-23 01:50:07 +00:00
umount Remove one of two WARNS=0. 2003-02-23 13:22:41 +00:00
vinum Update to use current version of devstat API. 2003-03-15 20:49:38 +00:00
Makefile Add the mksnap_ffs command to the sbin directory. This setuid root 2003-03-02 01:50:33 +00:00
Makefile.inc Default to WARNS=2. 2001-12-04 02:19:58 +00:00