diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2005-12-13 23:14:27 -0800 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-01-03 13:10:31 -0800 |
| commit | 89cee8b1cbb9dac40c92ef1968aea2b45f82fd18 (patch) | |
| tree | 01049841b15a9c2f3f136710382c7e4c11c1b1e5 /include/linux/sysctl.h | |
| parent | d5228a4f49db32d22a39c653281b527ef371129c (diff) | |
| download | op-kernel-dev-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.zip op-kernel-dev-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.tar.gz | |
[IPV4]: Safer reassembly
Another spin of Herbert Xu's "safer ip reassembly" patch
for 2.6.16.
(The original patch is here:
http://marc.theaimsgroup.com/?l=linux-netdev&m=112281936522415&w=2
and my only contribution is to have tested it.)
This patch (optionally) does additional checks before accepting IP
fragments, which can greatly reduce the possibility of reassembling
fragments which originated from different IP datagrams.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Arthur Kepner <akepner@sgi.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/linux/sysctl.h')
| -rw-r--r-- | include/linux/sysctl.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/linux/sysctl.h b/include/linux/sysctl.h index 4be34ef..93fa765 100644 --- a/include/linux/sysctl.h +++ b/include/linux/sysctl.h @@ -390,6 +390,7 @@ enum NET_IPV4_ICMP_ERRORS_USE_INBOUND_IFADDR=109, NET_TCP_CONG_CONTROL=110, NET_TCP_ABC=111, + NET_IPV4_IPFRAG_MAX_DIST=112, }; enum { |
