summaryrefslogtreecommitdiff
path: root/sys/netinet
diff options
context:
space:
mode:
authorJun-ichiro itojun Hagino <itojun@cvs.openbsd.org>2001-02-07 11:43:56 +0000
committerJun-ichiro itojun Hagino <itojun@cvs.openbsd.org>2001-02-07 11:43:56 +0000
commitab68204e67acf8f6cd003849586aeaa58289360f (patch)
tree87b1cb0f893deffd42f895d53965d05f091332f0 /sys/netinet
parentb23bfb5222ff0818eb8adf909ff2d781c2ade312 (diff)
by default, don't bark on inbound ND messages, as outsider may be able to
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
Diffstat (limited to 'sys/netinet')
-rw-r--r--sys/netinet/icmp6.h14
1 files changed, 11 insertions, 3 deletions
diff --git a/sys/netinet/icmp6.h b/sys/netinet/icmp6.h
index 5a62d382e9a..effaf0f04e0 100644
--- a/sys/netinet/icmp6.h
+++ b/sys/netinet/icmp6.h
@@ -1,5 +1,5 @@
-/* $OpenBSD: icmp6.h,v 1.14 2001/01/22 04:31:21 itojun Exp $ */
-/* $KAME: icmp6.h,v 1.32 2001/01/22 02:26:00 itojun Exp $ */
+/* $OpenBSD: icmp6.h,v 1.15 2001/02/07 11:43:52 itojun Exp $ */
+/* $KAME: icmp6.h,v 1.39 2001/02/06 03:48:06 itojun Exp $ */
/*
* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@@ -537,6 +537,12 @@ struct icmp6stat {
#define icp6s_oredirect icp6s_outerrhist.icp6errs_redirect
#define icp6s_ounknown icp6s_outerrhist.icp6errs_unknown
u_quad_t icp6s_pmtuchg; /* path MTU changes */
+ u_quad_t icp6s_nd_badopt; /* bad ND options */
+ u_quad_t icp6s_badns; /* bad neighbor solicitation */
+ u_quad_t icp6s_badna; /* bad neighbor advertisement */
+ u_quad_t icp6s_badrs; /* bad router advertisement */
+ u_quad_t icp6s_badra; /* bad router advertisement */
+ u_quad_t icp6s_badredirect; /* bad redirect message */
};
/*
@@ -559,7 +565,8 @@ struct icmp6stat {
#define ICMPV6CTL_ND6_MAXNUDHINT 15
#define ICMPV6CTL_MTUDISC_HIWAT 16
#define ICMPV6CTL_MTUDISC_LOWAT 17
-#define ICMPV6CTL_MAXID 18
+#define ICMPV6CTL_ND6_DEBUG 18
+#define ICMPV6CTL_MAXID 19
#define ICMPV6CTL_NAMES { \
{ 0, 0 }, \
@@ -580,6 +587,7 @@ struct icmp6stat {
{ "nd6_maxnudhint", CTLTYPE_INT }, \
{ "mtudisc_hiwat", CTLTYPE_INT }, \
{ "mtudisc_lowat", CTLTYPE_INT }, \
+ { "nd6_debug", CTLTYPE_INT }, \
}
#define RTF_PROBEMTU RTF_PROTO1