diff options
author | pst <pst@FreeBSD.org> | 1996-04-09 07:01:53 +0000 |
---|---|---|
committer | pst <pst@FreeBSD.org> | 1996-04-09 07:01:53 +0000 |
commit | 67931eee29c1243cda8edab749e0053a487358b5 (patch) | |
tree | fb4534e6335e95e3dfd18ee130878b258d20132f /sys/netinet | |
parent | a3cc2115526720239bf249173d8cef81e6876367 (diff) | |
download | FreeBSD-src-67931eee29c1243cda8edab749e0053a487358b5.zip FreeBSD-src-67931eee29c1243cda8edab749e0053a487358b5.tar.gz |
Logging UDP and TCP connection attempts should not be enabled by default.
It's trivial to create a denial of service attack on a box so enabled.
These messages, if enabled at all, must be rate-limited. (!)
Diffstat (limited to 'sys/netinet')
-rw-r--r-- | sys/netinet/tcp_input.c | 4 | ||||
-rw-r--r-- | sys/netinet/tcp_reass.c | 4 | ||||
-rw-r--r-- | sys/netinet/udp_usrreq.c | 4 |
3 files changed, 6 insertions, 6 deletions
diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c index 17e0df4..270abcd 100644 --- a/sys/netinet/tcp_input.c +++ b/sys/netinet/tcp_input.c @@ -31,7 +31,7 @@ * SUCH DAMAGE. * * @(#)tcp_input.c 8.12 (Berkeley) 5/24/95 - * $Id: tcp_input.c,v 1.40 1996/03/25 20:13:21 wollman Exp $ + * $Id: tcp_input.c,v 1.41 1996/04/04 10:46:39 phk Exp $ */ #ifndef TUBA_INCLUDE @@ -77,7 +77,7 @@ struct tcpstat tcpstat; SYSCTL_STRUCT(_net_inet_tcp, TCPCTL_STATS, stats, CTLFLAG_RD, &tcpstat , tcpstat, ""); -static int log_in_vain = 1; +static int log_in_vain = 0; SYSCTL_INT(_net_inet_tcp, OID_AUTO, log_in_vain, CTLFLAG_RW, &log_in_vain, 0, ""); diff --git a/sys/netinet/tcp_reass.c b/sys/netinet/tcp_reass.c index 17e0df4..270abcd 100644 --- a/sys/netinet/tcp_reass.c +++ b/sys/netinet/tcp_reass.c @@ -31,7 +31,7 @@ * SUCH DAMAGE. * * @(#)tcp_input.c 8.12 (Berkeley) 5/24/95 - * $Id: tcp_input.c,v 1.40 1996/03/25 20:13:21 wollman Exp $ + * $Id: tcp_input.c,v 1.41 1996/04/04 10:46:39 phk Exp $ */ #ifndef TUBA_INCLUDE @@ -77,7 +77,7 @@ struct tcpstat tcpstat; SYSCTL_STRUCT(_net_inet_tcp, TCPCTL_STATS, stats, CTLFLAG_RD, &tcpstat , tcpstat, ""); -static int log_in_vain = 1; +static int log_in_vain = 0; SYSCTL_INT(_net_inet_tcp, OID_AUTO, log_in_vain, CTLFLAG_RW, &log_in_vain, 0, ""); diff --git a/sys/netinet/udp_usrreq.c b/sys/netinet/udp_usrreq.c index 57abbe6..220b976 100644 --- a/sys/netinet/udp_usrreq.c +++ b/sys/netinet/udp_usrreq.c @@ -31,7 +31,7 @@ * SUCH DAMAGE. * * @(#)udp_usrreq.c 8.6 (Berkeley) 5/23/95 - * $Id: udp_usrreq.c,v 1.20 1996/03/11 15:13:38 davidg Exp $ + * $Id: udp_usrreq.c,v 1.21 1996/04/04 10:46:44 phk Exp $ */ #include <sys/param.h> @@ -73,7 +73,7 @@ static int udpcksum = 0; /* XXX */ SYSCTL_INT(_net_inet_udp, UDPCTL_CHECKSUM, checksum, CTLFLAG_RW, &udpcksum, 0, ""); -static int log_in_vain = 1; +static int log_in_vain = 0; SYSCTL_INT(_net_inet_udp, OID_AUTO, log_in_vain, CTLFLAG_RW, &log_in_vain, 0, ""); |