diff options
| author | des <des@FreeBSD.org> | 1999-09-13 09:45:07 +0000 |
|---|---|---|
| committer | des <des@FreeBSD.org> | 1999-09-13 09:45:07 +0000 |
| commit | ad7d5e0e01aad87115442a7aac072c1ff28f34bd (patch) | |
| tree | cfb52c788f631dfd5a7a7b28fd2da4df4449f778 /sys/conf | |
| parent | 4d628082ace71f3ad6b9c8b7679ffc8f8f50065c (diff) | |
| download | FreeBSD-src-ad7d5e0e01aad87115442a7aac072c1ff28f34bd.zip FreeBSD-src-ad7d5e0e01aad87115442a7aac072c1ff28f34bd.tar.gz | |
Fix disordering introduced in my previous commit.
Pointed out by: bde
Diffstat (limited to 'sys/conf')
| -rw-r--r-- | sys/conf/NOTES | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/sys/conf/NOTES b/sys/conf/NOTES index 3b8b8a7..ed50060 100644 --- a/sys/conf/NOTES +++ b/sys/conf/NOTES @@ -472,16 +472,16 @@ options TCPDEBUG # The following options add sysctl variables for controlling how certain # TCP packets are handled. # -# TCP_RESTRICT_RST adds support for blocking the emission of TCP RST packets. -# This is useful on systems which are exposed to SYN floods (e.g. IRC servers) -# or any system which one does not want to be easily portscannable. -# # TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN. This # prevents nmap et al. from identifying the TCP/IP stack, but breaks support # for RFC1644 extensions and is not recommended for web servers. # -options TCP_RESTRICT_RST #restrict emission of TCP RST +# TCP_RESTRICT_RST adds support for blocking the emission of TCP RST packets. +# This is useful on systems which are exposed to SYN floods (e.g. IRC servers) +# or any system which one does not want to be easily portscannable. +# options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN +options TCP_RESTRICT_RST #restrict emission of TCP RST # ICMP_BANDLIM enables icmp error response bandwidth limiting. You # typically want this option as it will help protect the machine from |
