summaryrefslogtreecommitdiff
path: root/sys/netinet/tcp_input.c
AgeCommit message (Collapse)Author
1997-11-12correct RST validity checking; fc@parkone.ci.oakland.ca.usTheo de Raadt
1997-11-12indentTheo de Raadt
1997-08-26indentTheo de Raadt
1997-08-16Just some more debugging info.Angelos D. Keromytis
1997-08-09SYN flood protection, by specifyingAngelos D. Keromytis
option TCPCOOKIE in the kernel config file. For very busy servers, consider raising the TCK_NFRIENDS value (it's currenly set to 16). Code originally from Matt Blaze and John Ioannidis.
1997-07-06unsigned calc should be signed; jdp@polstra.com; freebsd pr#3998Theo de Raadt
1997-06-10ensure RST is within window; avalon@coombs.anu.edu.auTheo de Raadt
1997-05-12arghTheo de Raadt
1997-02-05use arc4random()Theo de Raadt
1996-09-25Drop unused variableNiklas Hallqvist
1996-09-20`solve' the syn bomb problem as well as currently known; add sysctl's forTheo de Raadt
SOMAXCONN (kern.somaxconn), SOMINCONN (kern.sominconn), and TCPTV_KEEP_INIT (net.inet.tcp.keepinittime). when this is not enough (ie. overfull), start doing tail drop, but slightly prefer the same port.
1996-08-07Partial protection from TCP SYN attacksThorsten Lockert
1996-07-29Remove random() prototype, as it's not needed. Besides it was wrong for the ↵Niklas Hallqvist
alpha :-)
1996-07-29Make TCP ISS increment by random amountsThorsten Lockert
1996-03-03From NetBSD: 960217 mergeNiklas Hallqvist
1995-12-14from netbsd:Theo de Raadt
make netinet work on systems where pointers and longs are 64 bits (like the alpha). Biggest problem: IP headers were overlayed with structure which included pointers, and which therefore didn't overlay properly on 64-bit machines. Solution: instead of threading pointers through IP header overlays, add a "queue element" structure to do the threading, and point it at the ip headers.
1995-10-18initial import of NetBSD treeTheo de Raadt