diff options
author | Claudio Jeker <claudio@cvs.openbsd.org> | 2007-05-03 15:47:48 +0000 |
---|---|---|
committer | Claudio Jeker <claudio@cvs.openbsd.org> | 2007-05-03 15:47:48 +0000 |
commit | 75d4dd0cd8c10bb0404b8c740f914654055abaed (patch) | |
tree | 6811f06100f9e176b6605eb81b831b93b54ef66a /sys | |
parent | b9d7cc502aad101142775d9c2635fefde68a77ec (diff) |
Reduce ip6_hdrnestlimit from 50 to 10. Normal IPv6 packets should not have
more then 10 headers nested.
OK deraadt@ henning@ mcbride@
Diffstat (limited to 'sys')
-rw-r--r-- | sys/netinet6/in6_proto.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet6/in6_proto.c b/sys/netinet6/in6_proto.c index bb0732d367c..10dc35ccafa 100644 --- a/sys/netinet6/in6_proto.c +++ b/sys/netinet6/in6_proto.c @@ -1,4 +1,4 @@ -/* $OpenBSD: in6_proto.c,v 1.51 2006/11/21 05:37:32 itojun Exp $ */ +/* $OpenBSD: in6_proto.c,v 1.52 2007/05/03 15:47:47 claudio Exp $ */ /* $KAME: in6_proto.c,v 1.66 2000/10/10 15:35:47 itojun Exp $ */ /* @@ -263,7 +263,7 @@ int ip6_accept_rtadv = 0; /* enabling forwarding and rtadv concurrently is dange int ip6_maxfragpackets = 200; int ip6_maxfrags = 200; int ip6_log_interval = 5; -int ip6_hdrnestlimit = 50; /* appropriate? */ +int ip6_hdrnestlimit = 10; /* appropriate? */ int ip6_dad_count = 1; /* DupAddrDetectionTransmits */ int ip6_auto_flowlabel = 1; int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */ |