diff options
| author | fenner <fenner@FreeBSD.org> | 1996-11-10 07:37:24 +0000 |
|---|---|---|
| committer | fenner <fenner@FreeBSD.org> | 1996-11-10 07:37:24 +0000 |
| commit | 322740214553c0eff2101725aa8f5e1c4a50644d (patch) | |
| tree | e30df6736458950574ff1cbe7913eb2b4c4083c2 /sys | |
| parent | 5b38eecfbf03862a8692084f90e3ef0eeb26bb42 (diff) | |
| download | FreeBSD-src-322740214553c0eff2101725aa8f5e1c4a50644d.zip FreeBSD-src-322740214553c0eff2101725aa8f5e1c4a50644d.tar.gz | |
Re-enable the TCP SYN-attack protection code. I was the one who didn't
understand the socket state flag.
2.2 candidate.
Diffstat (limited to 'sys')
| -rw-r--r-- | sys/netinet/tcp_input.c | 4 | ||||
| -rw-r--r-- | sys/netinet/tcp_reass.c | 4 |
2 files changed, 2 insertions, 6 deletions
diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c index 657fef8..d481fbd 100644 --- a/sys/netinet/tcp_input.c +++ b/sys/netinet/tcp_input.c @@ -31,7 +31,7 @@ * SUCH DAMAGE. * * @(#)tcp_input.c 8.12 (Berkeley) 5/24/95 - * $Id: tcp_input.c,v 1.53 1996/10/07 19:06:10 davidg Exp $ + * $Id: tcp_input.c,v 1.54 1996/10/11 19:26:42 pst Exp $ */ #ifndef TUBA_INCLUDE @@ -415,14 +415,12 @@ findpcb: so2 = sonewconn(so, 0); if (so2 == 0) { tcpstat.tcps_listendrop++; -#ifdef TCPSYNRED so2 = sodropablereq(so); if (so2) { tcp_drop(sototcpcb(so2), ETIMEDOUT); so2 = sonewconn(so, 0); } if (!so2) -#endif goto drop; } so = so2; diff --git a/sys/netinet/tcp_reass.c b/sys/netinet/tcp_reass.c index 657fef8..d481fbd 100644 --- a/sys/netinet/tcp_reass.c +++ b/sys/netinet/tcp_reass.c @@ -31,7 +31,7 @@ * SUCH DAMAGE. * * @(#)tcp_input.c 8.12 (Berkeley) 5/24/95 - * $Id: tcp_input.c,v 1.53 1996/10/07 19:06:10 davidg Exp $ + * $Id: tcp_input.c,v 1.54 1996/10/11 19:26:42 pst Exp $ */ #ifndef TUBA_INCLUDE @@ -415,14 +415,12 @@ findpcb: so2 = sonewconn(so, 0); if (so2 == 0) { tcpstat.tcps_listendrop++; -#ifdef TCPSYNRED so2 = sodropablereq(so); if (so2) { tcp_drop(sototcpcb(so2), ETIMEDOUT); so2 = sonewconn(so, 0); } if (!so2) -#endif goto drop; } so = so2; |
