mdodd e72fdee732 Implement support for RFC 3514 (The Security Flag in the IPv4 Header). ... (See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt) This fulfills the host requirements for userland support by way of the setsockopt() IP_EVIL_INTENT message. There are three sysctl tunables provided to govern system behavior. net.inet.ip.rfc3514: Enables support for rfc3514. As this is an Informational RFC and support is not yet widespread this option is disabled by default. net.inet.ip.hear_no_evil If set the host will discard all received evil packets. net.inet.ip.speak_no_evil If set the host will discard all transmitted evil packets. The IP statistics counter 'ips_evil' (available via 'netstat') provides information on the number of 'evil' packets recieved. For reference, the '-E' option to 'ping' has been provided to demonstrate and test the implementation.		2003-04-01 08:21:44 +00:00
..
man1	Mention the new bind(1) sh builtin.	2002-07-23 14:38:07 +00:00
man3	The .Fn function. Use .Xr where appropriate.	2003-03-24 16:05:24 +00:00
man4	Implement support for RFC 3514 (The Security Flag in the IPv4 Header).	2003-04-01 08:21:44 +00:00
man5	Fix typo in the version of the diff that I committed.	2003-03-26 17:32:45 +00:00
man6
man7	s/loaded as a module/available as a module/g	2003-03-23 04:23:10 +00:00
man8	Add a tiny manpage to make sure users aren't surprised when they	2003-03-25 15:07:01 +00:00
man9	rid is not a pointer to int, but rather just a plain int.	2003-03-30 00:30:29 +00:00
Makefile	Re-enable running of makewhatis(1).	2002-05-27 15:52:40 +00:00