summaryrefslogtreecommitdiff
path: root/sys/net/pf_syncookies.c
AgeCommit message (Collapse)Author
2018-06-18Refactor the six ways to find TCP options into one new function. As a result:Richard Procter
- MSS and WSCALE option candidates must now meet their min type length. - 'max-mss' is now more tolerant of malformed option lists. These changes were immaterial to the live traffic I've examined. OK sashan@ mpi@
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
syncookies are set to adaptive tunable, ok claudio benno
2018-02-08add DIOCGETSYNFLWATS to get current synflood detection watermarks,Henning Brauer
ok claudio benno procter
2018-02-07provide counters for # of synfloods detected, # of syncookies sent,Henning Brauer
# of syncookies successfuly validated, ok phessler
2018-02-07unbreak strict alignment archs by using SIPHASH_KEY for siphashDavid Gwynne
keys, not uint8_t array. found by sparc64. probably ok henning@, but he's at coffee
2018-02-06syncookies implementation to be used in pf, based on the FreeBSD one byHenning Brauer
Andre Oppermann, heavily adjusted for pf instead of stack use and with entirely rewritten timeout machinery and new hashing with bits from sashan, widely discussed with the other network hackers
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-16 10:48:06 +0000