Date: Tue, 28 Oct 1997 09:58:03 -0600 (CST) From: Alex Nash <nash@Mcs.Net> To: Darren Reed <darrenr@cyber.com.au> Cc: Bill Fenner <fenner@parc.xerox.com>, guido@FreeBSD.ORG, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG Subject: Re: cvs commit: src/sys/netinet ip_input.c Message-ID: <Pine.BSF.3.95.971028095515.20582B-100000@Jupiter.Mcs.Net> In-Reply-To: <199710281021.VAA27329@plum.cyber.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 28 Oct 1997, Darren Reed wrote: > In some mail I received from Bill Fenner, sie wrote > [...] > > However, there is a problem with the actual change: the "goto" bypasses > > the strcpy() which gives log() something to print. In addition, the whole > > log(LOG_WARNING, ...) for each packet provides a wonderful denial of service > > attack (I understand this isn't new with this commit, but it's still an > > issue). > > At least log() is used and you have a chance to redirect it via syslogd(?) to > a file...if you relied on ipfw using printf, everything would go out via the > console. Kernel printf is sent to both the console and the logger. Alex
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.971028095515.20582B-100000>