CVS log for src/sys/netinet/ip_input.c

Up to [cvs.NetBSD.org] / src / sys / netinet

Request diff between arbitrary revisions

Default branch: MAIN
Current tag: thorpej_scsipi_base

Revision 1.133 / (download) - annotate - [select for diffs], Mon Apr 16 17:03:33 2001 UTC (12 years, 1 month ago) by itojun
Branch: MAIN
CVS Tags: thorpej_scsipi_nbase, thorpej_scsipi_beforemerge, thorpej_scsipi_base
Changes since 1.132: +2 -2 lines
Diff to previous 1.132 (colored)

give a default value to net.inet.ip.maxfragpackets, to protect us from
"lots of fragmented packets" DoS attack.

the current default value is derived from ipv6 counterpart, which is
a magical value "200".  it should be enough for normal systems, not sure
if it is enough when you take hundreds of thousands of tcp connections on
your system.  if you have proposal for a better value with concrete reasons,
let me know.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.