From 19e7731a48a4eb97e3756995fb2a8094f13594e6 Mon Sep 17 00:00:00 2001
From: des <des@FreeBSD.org>
Date: Sun, 12 Sep 1999 17:22:08 +0000
Subject: Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctl
 variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel
 options, respectively. See the comments in LINT for details.

---
 etc/rc.network | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'etc/rc.network')

diff --git a/etc/rc.network b/etc/rc.network
index d132525..781c73f 100644
--- a/etc/rc.network
+++ b/etc/rc.network
@@ -229,6 +229,16 @@ network_pass1() {
 	    sysctl -w net.inet.tcp.always_keepalive=1 >/dev/null
     fi
 
+    if [ "X$tcp_restrict_rst" = X"YES" ]; then
+	    echo -n ' restrict TCP reset=YES'
+	    sysctl -w net.inet.tcp.restrict_rst=1 >/dev/null
+    fi
+
+    if [ "X$tcp_drop_synfin" = X"YES" ]; then
+	    echo -n ' drop SYN+FIN packets=YES'
+	    sysctl -w net.inet.tcp.drop_synfin=1 >/dev/null
+    fi
+
     if [ "${ipxgateway_enable}" = "YES" ]; then
 	    echo -n ' IPX gateway=YES'
 	    sysctl -w net.ipx.ipx.ipxforwarding=1 >/dev/null
-- 
cgit v1.1