upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-11 09:41:03 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/sys/netinet
History
Jonathan Lemon a9c9684163 Extend the SYN DoS defense by adding syncookies to the syncache. 
All TCP ISNs that are sent out are valid cookies, which allows entries
in the syncache to be dropped and still have the ACK accepted later.
As all entries pass through the syncache, there is no sudden switchover
from cache -> cookies when the cache is full; instead, syncache entries
simply have a reduced lifetime.  More details may be found in the
"Resisting DoS attacks with a SYN cache" paper in the Usenix BSDCon 2002
conference proceedings.

Sponsored by: DARPA, NAI Labs
2001-12-19 06:12:14 +00:00
..
libalias Fixed the bug in transparent TCP proxying with the "encode_ip_hdr" 2001-12-18 16:13:45 +00:00
accf_data.c Remove headers not needed. 2000-10-07 23:15:17 +00:00
accf_http.c Fix incorrect logic wouldn't disconnect incomming connections that had been 2001-01-03 19:50:23 +00:00
icmp6.h - Renumber KAME local ICMP types and NDP options numberes beacaues they 2001-06-21 07:08:43 +00:00
icmp_var.h whitespace fixes. 2001-12-14 19:32:47 +00:00
if_atm.c Pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2. 2001-10-17 18:07:05 +00:00
if_atm.h Pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2. 2001-10-17 18:07:05 +00:00
if_ether.c Minor style fix. 2001-12-13 04:01:01 +00:00
if_ether.h bring in ARP support for variable length link level addresses 2001-10-14 20:17:53 +00:00
if_fddi.h Change #ifdef KERNEL to #ifdef _KERNEL in the public headers. "KERNEL" 1999-12-29 04:46:21 +00:00
igmp.c One caller of rip_input failed to be converted in the last commit. 2001-09-03 20:40:35 +00:00
igmp.h $Id$ -> $FreeBSD$ 1999-08-28 01:08:13 +00:00
igmp_var.h Patches from Keiichi SHIMA <keiichi@iij.ad.jp> 2001-09-03 20:03:55 +00:00
in.c During SIOCAIFADDR, if in_ifinit() fails and we've already added an 2001-11-30 14:00:55 +00:00
in.h o Stop abusing MD headers with non-MD types. 2001-12-01 03:43:01 +00:00
in_cksum.c $Id$ -> $FreeBSD$ 1999-08-28 01:08:13 +00:00
in_gif.c KSE Milestone 2 2001-09-12 08:38:13 +00:00
in_gif.h Patches from Keiichi SHIMA <keiichi@iij.ad.jp> 2001-09-03 20:03:55 +00:00
in_pcb.c Minor style fixes. 2001-12-13 04:01:23 +00:00
in_pcb.h Add include of net/route.h, as structures moved around due to the 2001-11-27 17:36:39 +00:00
in_proto.c Patches from Keiichi SHIMA <keiichi@iij.ad.jp> 2001-09-03 20:03:55 +00:00
in_rmx.c Centralize satosin(), sintosa() and ifatoia() macros in <netinet/in.h> 2001-09-29 03:23:44 +00:00
in_systm.h Change #ifdef KERNEL to #ifdef _KERNEL in the public headers. "KERNEL" 1999-12-29 04:46:21 +00:00
in_var.h Nuke unused (and incorrect) #define of INADDR_HMASK. 2001-09-29 14:59:20 +00:00
ip.h o Add IPOPT_ESO for the 'Extended Security' IP option (RFC1108) 2001-12-14 19:37:32 +00:00
ip6.h Sync with recent KAME. 2001-06-11 12:39:29 +00:00
ip_divert.c Update to C99, s/__FUNCTION__/__func__/, 2001-12-10 08:09:49 +00:00
ip_dummynet.c MFS: sync the ipfw/dummynet/bridge code with the one recently merged 2001-11-04 22:56:25 +00:00
ip_dummynet.h MFS: sync the ipfw/dummynet/bridge code with the one recently merged 2001-11-04 22:56:25 +00:00
ip_ecn.c Sync with recent KAME. 2001-06-11 12:39:29 +00:00
ip_ecn.h Sync with recent KAME. 2001-06-11 12:39:29 +00:00
ip_encap.c Remove some un-needed code that was accidentally included in 2001-09-07 07:24:28 +00:00
ip_encap.h Patches from KAME to remove usage of Varargs in existing 2001-09-07 07:19:12 +00:00
ip_flow.c s/FREE/free/ 2001-11-04 17:35:31 +00:00
ip_flow.h Back out the previous change to the queue(3) interface. 2000-05-26 02:09:24 +00:00
ip_fw.c minor whitespace fixes. 2001-12-14 19:32:00 +00:00
ip_fw.h MFS: sync the ipfw/dummynet/bridge code with the one recently merged 2001-11-04 22:56:25 +00:00
ip_icmp.c whitespace fixes. 2001-12-14 19:32:47 +00:00
ip_icmp.h Patches from Keiichi SHIMA <keiichi@iij.ad.jp> 2001-09-03 20:03:55 +00:00
ip_id.c Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets. 2001-06-01 10:02:28 +00:00
ip_input.c minor style and whitespace fixes. 2001-12-14 19:33:29 +00:00
ip_mroute.c Allow for ip_output() to be called with a NULL route pointer. 2001-12-01 13:48:16 +00:00
ip_mroute.h Somewhat modernize ip_mroute.c: 2001-07-25 20:15:49 +00:00
ip_output.c whitespace and style fixes recovered from -stable. 2001-12-14 19:34:11 +00:00
ip_var.h - Make ip_rtaddr() global, and use it to look up the correct source 2001-11-30 10:40:28 +00:00
ipprotosw.h KSE Milestone 2 2001-09-12 08:38:13 +00:00
raw_ip.c Restore the ability to use IP_FW_ADD with setsockopt(2) that got 2001-11-26 10:05:58 +00:00
tcp.h o Minor style(9)ism to make consistent with -STABLE 2001-01-09 18:26:17 +00:00
tcp_debug.c sync with kame tree as of july00. tons of bug fixes/improvements. 2000-07-04 16:35:15 +00:00
tcp_debug.h Sorry in this just befor code freeze commit. 2000-01-29 11:49:07 +00:00
tcp_fsm.h Undo rev 1.10, which took out TH_FIN from the CLOSING state. This 1999-11-07 04:18:30 +00:00
tcp_input.c Fix up tabs in comments. 2001-12-13 04:02:09 +00:00
tcp_output.c Reduce the local network slowstart flightsize from infinity to 4 packets. 2001-12-14 18:26:52 +00:00
tcp_reass.c Fix up tabs in comments. 2001-12-13 04:02:09 +00:00
tcp_seq.h Move initialization of snd_recover into tcp_sendseqinit(). 2001-11-21 18:45:51 +00:00
tcp_subr.c Introduce a syncache, which enables FreeBSD to withstand a SYN flood 2001-11-22 04:50:44 +00:00
tcp_syncache.c Extend the SYN DoS defense by adding syncookies to the syncache. 2001-12-19 06:12:14 +00:00
tcp_timer.c o Our currenty userland boot code (due to rc.conf and rc.network) always 2001-12-07 17:01:28 +00:00
tcp_timer.h Change #ifdef KERNEL to #ifdef _KERNEL in the public headers. "KERNEL" 1999-12-29 04:46:21 +00:00
tcp_timewait.c Introduce a syncache, which enables FreeBSD to withstand a SYN flood 2001-11-22 04:50:44 +00:00
tcp_usrreq.c Introduce a syncache, which enables FreeBSD to withstand a SYN flood 2001-11-22 04:50:44 +00:00
tcp_var.h Fix a bug with transmitter restart after receiving a 0 window. The 2001-12-02 08:49:29 +00:00
tcpip.h Remove struct full_tcpiphdr{}. 2001-02-26 20:10:16 +00:00
udp.h $Id$ -> $FreeBSD$ 1999-08-28 01:08:13 +00:00
udp_usrreq.c o Replace reference to 'struct proc' with 'struct thread' in 'struct 2001-11-08 02:13:18 +00:00
udp_var.h Patches from Keiichi SHIMA <keiichi@iij.ad.jp> 2001-09-03 20:03:55 +00:00