Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | correct RST validity checking; fc@parkone.ci.oakland.ca.us | 1997-11-12 | 1 | -4/+4 | ||
| | ||||||
* | indent | 1997-11-12 | 1 | -22/+16 | ||
| | ||||||
* | indent | 1997-08-26 | 1 | -5/+5 | ||
| | ||||||
* | Just some more debugging info. | 1997-08-16 | 1 | -3/+3 | ||
| | ||||||
* | SYN flood protection, by specifying | 1997-08-09 | 1 | -2/+151 | ||
| | | | | | | | | option TCPCOOKIE in the kernel config file. For very busy servers, consider raising the TCK_NFRIENDS value (it's currenly set to 16). Code originally from Matt Blaze and John Ioannidis. | |||||
* | unsigned calc should be signed; jdp@polstra.com; freebsd pr#3998 | 1997-07-06 | 1 | -2/+2 | ||
| | ||||||
* | ensure RST is within window; avalon@coombs.anu.edu.au | 1997-06-10 | 1 | -20/+26 | ||
| | ||||||
* | argh | 1997-05-12 | 1 | -3/+5 | ||
| | ||||||
* | use arc4random() | 1997-02-05 | 1 | -2/+3 | ||
| | ||||||
* | Drop unused variable | 1996-09-25 | 1 | -2/+2 | ||
| | ||||||
* | `solve' the syn bomb problem as well as currently known; add sysctl's for | 1996-09-20 | 1 | -5/+58 | ||
| | | | | | | SOMAXCONN (kern.somaxconn), SOMINCONN (kern.sominconn), and TCPTV_KEEP_INIT (net.inet.tcp.keepinittime). when this is not enough (ie. overfull), start doing tail drop, but slightly prefer the same port. | |||||
* | Partial protection from TCP SYN attacks | 1996-08-07 | 1 | -2/+3 | ||
| | ||||||
* | Remove random() prototype, as it's not needed. Besides it was wrong for the alpha :-) | 1996-07-29 | 1 | -4/+1 | ||
| | ||||||
* | Make TCP ISS increment by random amounts | 1996-07-29 | 1 | -1/+8 | ||
| | ||||||
* | From NetBSD: 960217 merge | 1996-03-03 | 1 | -29/+37 | ||
| | ||||||
* | from netbsd: | 1995-12-14 | 1 | -39/+57 | ||
| | | | | | | | | | make netinet work on systems where pointers and longs are 64 bits (like the alpha). Biggest problem: IP headers were overlayed with structure which included pointers, and which therefore didn't overlay properly on 64-bit machines. Solution: instead of threading pointers through IP header overlays, add a "queue element" structure to do the threading, and point it at the ip headers. | |||||
* | initial import of NetBSD tree | 1995-10-18 | 1 | -0/+1641 | ||