diff options
author | tuexen <tuexen@FreeBSD.org> | 2012-06-18 17:11:24 +0000 |
---|---|---|
committer | tuexen <tuexen@FreeBSD.org> | 2012-06-18 17:11:24 +0000 |
commit | be8d1bbb926c84c7aec9b0b630c27ca13e9817b7 (patch) | |
tree | df167055ef9759487666ba1c8236962000c56d44 /sys/netinet/sctp_input.c | |
parent | 2cb9af1cef61a68d54795a1bf828273c8d412146 (diff) | |
download | FreeBSD-src-be8d1bbb926c84c7aec9b0b630c27ca13e9817b7.zip FreeBSD-src-be8d1bbb926c84c7aec9b0b630c27ca13e9817b7.tar.gz |
Add rate limitation for SCTP OOTB responses.
MFC after: 3 days
Diffstat (limited to 'sys/netinet/sctp_input.c')
-rw-r--r-- | sys/netinet/sctp_input.c | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/sys/netinet/sctp_input.c b/sys/netinet/sctp_input.c index f934c74..dec1619 100644 --- a/sys/netinet/sctp_input.c +++ b/sys/netinet/sctp_input.c @@ -6060,15 +6060,8 @@ sctp_skip_csum_4: struct sctp_init_chunk *init_chk, chunk_buf; SCTP_STAT_INCR(sctps_noport); -#ifdef ICMP_BANDLIM - /* - * we use the bandwidth limiting to protect against sending - * too many ABORTS all at once. In this case these count the - * same as an ICMP message. - */ - if (badport_bandlim(0) < 0) + if (badport_bandlim(BANDLIM_SCTP_OOTB) < 0) goto bad; -#endif /* ICMP_BANDLIM */ SCTPDBG(SCTP_DEBUG_INPUT1, "Sending a ABORT from packet entry!\n"); if (ch->chunk_type == SCTP_INITIATION) { |