diff options
| author | des <des@FreeBSD.org> | 1999-11-02 08:44:26 +0000 |
|---|---|---|
| committer | des <des@FreeBSD.org> | 1999-11-02 08:44:26 +0000 |
| commit | 6380359f116e712235a2d984a3abeb38b23f52e1 (patch) | |
| tree | 2a625fbe728cf919ae04912d3c3da6b09ea5ab6f | |
| parent | 890342f440fb076327d30578cd473fba1ac66c50 (diff) | |
| download | FreeBSD-src-6380359f116e712235a2d984a3abeb38b23f52e1.zip FreeBSD-src-6380359f116e712235a2d984a3abeb38b23f52e1.tar.gz | |
Document my TCP/IP hacks.
| -rw-r--r-- | release/texts/alpha/RELNOTES.TXT | 8 | ||||
| -rw-r--r-- | release/texts/i386/RELNOTES.TXT | 8 |
2 files changed, 16 insertions, 0 deletions
diff --git a/release/texts/alpha/RELNOTES.TXT b/release/texts/alpha/RELNOTES.TXT index ae8d1e20..4898835 100644 --- a/release/texts/alpha/RELNOTES.TXT +++ b/release/texts/alpha/RELNOTES.TXT @@ -105,6 +105,14 @@ Driver support has been added for PCI fast ethernet adapters based on the Davicom DM9100 and DM9102 ethernet controllers, including the Jaton Corporation XpressNet. +Support has been added for blocking incoming ICMP redirects, outgoing RST +frames and incoming SYN|FIN frames in order to lessen or nullify the +impact of certain kinds of DoS attacks. [MERGED] + +Support has been added for forwarding IP datagrams without inspecting or +decreasing the TTL in order to make gateways and firewalls less visible +and therefore less exposed to attacks. [MERGED] + 1.2. SECURITY FIXES ------------------- diff --git a/release/texts/i386/RELNOTES.TXT b/release/texts/i386/RELNOTES.TXT index a228576..c644d79 100644 --- a/release/texts/i386/RELNOTES.TXT +++ b/release/texts/i386/RELNOTES.TXT @@ -105,6 +105,14 @@ Driver support has been added for PCI fast ethernet adapters based on the Davicom DM9100 and DM9102 ethernet controllers, including the Jaton Corporation XpressNet. +Support has been added for blocking incoming ICMP redirects, outgoing RST +frames and incoming SYN|FIN frames in order to lessen or nullify the +impact of certain kinds of DoS attacks. [MERGED] + +Support has been added for forwarding IP datagrams without inspecting or +decreasing the TTL in order to make gateways and firewalls less visible +and therefore less exposed to attacks. [MERGED] + 1.2. SECURITY FIXES ------------------- |
