From owner-cvs-all Fri Feb 23 12:51:53 2001 Delivered-To: cvs-all@freebsd.org Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 8F02537B491; Fri, 23 Feb 2001 12:51:47 -0800 (PST) (envelope-from jlemon@FreeBSD.org) Received: (from jlemon@localhost) by freefall.freebsd.org (8.11.1/8.11.1) id f1NKplt63298; Fri, 23 Feb 2001 12:51:47 -0800 (PST) (envelope-from jlemon) Message-Id: <200102232051.f1NKplt63298@freefall.freebsd.org> From: Jonathan Lemon Date: Fri, 23 Feb 2001 12:51:47 -0800 (PST) To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet ip_icmp.c ip_input.c tcp_subr.c X-FreeBSD-CVS-Branch: HEAD Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG jlemon 2001/02/23 12:51:47 PST Modified files: sys/netinet ip_icmp.c ip_input.c tcp_subr.c Log: Allow ICMP unreachables which map into PRC_UNREACH_ADMIN_PROHIB to reset TCP connections which are in the SYN_SENT state, if the sequence number in the echoed ICMP reply is correct. This behavior can be controlled by the sysctl net.inet.tcp.icmp_may_rst. Currently, only subtypes 2,3,10,11,12 are treated as such (port, protocol and administrative unreachables). Assocaiate an error code with these resets which is reported to the user application: ENETRESET. Disallow resetting TCP sessions which are not in a SYN_SENT state. Reviewed by: jesper, -net Revision Changes Path 1.53 +16 -48 src/sys/netinet/ip_icmp.c 1.155 +2 -2 src/sys/netinet/ip_input.c 1.92 +12 -68 src/sys/netinet/tcp_subr.c To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message