summaryrefslogtreecommitdiffstats
path: root/etc/defaults/rc.conf
diff options
context:
space:
mode:
authorwilko <wilko@FreeBSD.org>2000-05-27 18:03:15 +0000
committerwilko <wilko@FreeBSD.org>2000-05-27 18:03:15 +0000
commit58e3e4be42176a9705c6924f81e51811979ce173 (patch)
tree15fd7461fe40e62bb254949afefed3a00fd5349a /etc/defaults/rc.conf
parent2d7881939526384dcecfd28ce647e0a337f0df01 (diff)
downloadFreeBSD-src-58e3e4be42176a9705c6924f81e51811979ce173.zip
FreeBSD-src-58e3e4be42176a9705c6924f81e51811979ce173.tar.gz
Add suggested comment for TCP_DROP_SYNFIN and TCP_RESTRICT_RST
PR: conf/18124 Submitted by: Matt Heckaman <matt@arpa.mail.net>
Diffstat (limited to 'etc/defaults/rc.conf')
-rw-r--r--etc/defaults/rc.conf2
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf
index b861fdb..0b6da29 100644
--- a/etc/defaults/rc.conf
+++ b/etc/defaults/rc.conf
@@ -55,6 +55,8 @@ natd_flags="" # Additional flags for natd.
tcp_extensions="NO" # Set to YES to turn on RFC1323 extensions.
log_in_vain="NO" # YES to log connects to ports w/o listeners.
tcp_keepalive="YES" # Enable stale TCP connection timeout (or NO).
+# For the following two options, you need to have TCP_DROP_SYNFIN and
+# TCP_RESTRICT_RST set in your kernel. Please refer to LINT for details.
tcp_drop_synfin="NO" # Set to YES to drop TCP packets with SYN+FIN
# NOTE: this violates the TCP specification
tcp_restrict_rst="NO" # Set to YES to restrict emission of RST
OpenPOWER on IntegriCloud