summaryrefslogtreecommitdiff
path: root/sys
diff options
context:
space:
mode:
authorClaudio Jeker <claudio@cvs.openbsd.org>2007-05-03 15:47:48 +0000
committerClaudio Jeker <claudio@cvs.openbsd.org>2007-05-03 15:47:48 +0000
commit75d4dd0cd8c10bb0404b8c740f914654055abaed (patch)
tree6811f06100f9e176b6605eb81b831b93b54ef66a /sys
parentb9d7cc502aad101142775d9c2635fefde68a77ec (diff)
Reduce ip6_hdrnestlimit from 50 to 10. Normal IPv6 packets should not have
more then 10 headers nested. OK deraadt@ henning@ mcbride@
Diffstat (limited to 'sys')
-rw-r--r--sys/netinet6/in6_proto.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet6/in6_proto.c b/sys/netinet6/in6_proto.c
index bb0732d367c..10dc35ccafa 100644
--- a/sys/netinet6/in6_proto.c
+++ b/sys/netinet6/in6_proto.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: in6_proto.c,v 1.51 2006/11/21 05:37:32 itojun Exp $ */
+/* $OpenBSD: in6_proto.c,v 1.52 2007/05/03 15:47:47 claudio Exp $ */
/* $KAME: in6_proto.c,v 1.66 2000/10/10 15:35:47 itojun Exp $ */
/*
@@ -263,7 +263,7 @@ int ip6_accept_rtadv = 0; /* enabling forwarding and rtadv concurrently is dange
int ip6_maxfragpackets = 200;
int ip6_maxfrags = 200;
int ip6_log_interval = 5;
-int ip6_hdrnestlimit = 50; /* appropriate? */
+int ip6_hdrnestlimit = 10; /* appropriate? */
int ip6_dad_count = 1; /* DupAddrDetectionTransmits */
int ip6_auto_flowlabel = 1;
int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */