From owner-freebsd-net@FreeBSD.ORG Sun Oct 3 03:02:31 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 15A53106566B; Sun, 3 Oct 2010 03:02:31 +0000 (UTC) (envelope-from julian@freebsd.org) Received: from out-0.mx.aerioconnect.net (out-0-17.mx.aerioconnect.net [216.240.47.77]) by mx1.freebsd.org (Postfix) with ESMTP id EC7068FC0A; Sun, 3 Oct 2010 03:02:30 +0000 (UTC) Received: from idiom.com (postfix@mx0.idiom.com [216.240.32.160]) by out-0.mx.aerioconnect.net (8.13.8/8.13.8) with ESMTP id o9332SlH027907; Sat, 2 Oct 2010 20:02:28 -0700 X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e Received: from julian-mac.elischer.org (h-67-100-89-137.snfccasy.static.covad.net [67.100.89.137]) by idiom.com (Postfix) with ESMTP id 474632D6012; Sat, 2 Oct 2010 20:02:27 -0700 (PDT) Message-ID: <4CA7F26C.7030408@freebsd.org> Date: Sat, 02 Oct 2010 20:03:08 -0700 From: Julian Elischer User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.2.9) Gecko/20100915 Thunderbird/3.1.4 MIME-Version: 1.0 To: Andre Oppermann References: <4CA6FF9A.9090502@minibofh.org> <4CA7A103.3050000@freebsd.org> In-Reply-To: <4CA7A103.3050000@freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.67 on 216.240.47.51 Cc: Jordi Espasa Clofent , freebsd-net@freebsd.org Subject: Re: TCP X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Oct 2010 03:02:31 -0000 On 10/2/10 2:15 PM, Andre Oppermann wrote: > On 02.10.2010 11:47, Jordi Espasa Clofent wrote: >> Hi all, >> >> I've read this interesting article: >> http://www.packetstan.com/2010/09/openbsd-timestamps.html >> >> The question is simple >> >> żIs there some way in FreeBSD to randomize the TCP timestamps as >> OpenBSD does by default? I guess >> some sysctl statement should do it, but I don't know. > > The timestamps on FreeBSD for passive open are randomized as > long as you use SYN cookies (enabled by default). For passive > open they are not (yet) randomized. which one of those 'passive' is supposed to be 'active'?