diff options
| author |   claudio <claudio@openbsd.org> | 2007-05-03 15:47:47 +0000 |
|---|---|---|
| committer | claudio <claudio@openbsd.org> | 2007-05-03 15:47:47 +0000 |
| commit | cd3d4ba9e428942d38a459f8cbe6351263bd39d8 (patch) | |
| tree | 4c1c5d6fb508312dd785074c0b1ff091a00658ad | |
| parent | Enable fast channel switching in monitor mode, which makes apps like (diff) | |
| download | wireguard-openbsd-cd3d4ba9e428942d38a459f8cbe6351263bd39d8.tar.xz wireguard-openbsd-cd3d4ba9e428942d38a459f8cbe6351263bd39d8.zip | |
Reduce ip6_hdrnestlimit from 50 to 10. Normal IPv6 packets should not have
more then 10 headers nested.
OK deraadt@ henning@ mcbride@
| -rw-r--r-- | sys/netinet6/in6_proto.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet6/in6_proto.c b/sys/netinet6/in6_proto.c index bb0732d367c..10dc35ccafa 100644 --- a/sys/netinet6/in6_proto.c +++ b/sys/netinet6/in6_proto.c @@ -1,4 +1,4 @@ -/* $OpenBSD: in6_proto.c,v 1.51 2006/11/21 05:37:32 itojun Exp $ */ +/* $OpenBSD: in6_proto.c,v 1.52 2007/05/03 15:47:47 claudio Exp $ */ /* $KAME: in6_proto.c,v 1.66 2000/10/10 15:35:47 itojun Exp $ */ /* @@ -263,7 +263,7 @@ int ip6_accept_rtadv = 0; /* enabling forwarding and rtadv concurrently is dange int ip6_maxfragpackets = 200; int ip6_maxfrags = 200; int ip6_log_interval = 5; -int ip6_hdrnestlimit = 50; /* appropriate? */ +int ip6_hdrnestlimit = 10; /* appropriate? */ int ip6_dad_count = 1; /* DupAddrDetectionTransmits */ int ip6_auto_flowlabel = 1; int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */ |