From owner-freebsd-net@FreeBSD.ORG  Fri May 13 12:32:14 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id E0B0716A4CE; Fri, 13 May 2005 12:32:14 +0000 (GMT)
Received: from mp2.macomnet.net (mp2.macomnet.net [195.128.64.6])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id D6C9243D3F; Fri, 13 May 2005 12:32:13 +0000 (GMT)
	(envelope-from maxim@macomnet.ru)
Received-SPF: pass (mp2.macomnet.net: domain of maxim@macomnet.ru designates
	127.0.0.1 as permitted sender) receiver=mp2.macomnet.net; client_ip=127.0.0.1;
	envelope-from=maxim@macomnet.ru;
Received: from localhost (localhost [127.0.0.1])
	by mp2.macomnet.net (8.12.11/8.12.11) with ESMTP id j4DCW9e3012888;
	Fri, 13 May 2005 16:32:09 +0400 (MSD)
	(envelope-from maxim@macomnet.ru)
Date: Fri, 13 May 2005 16:32:09 +0400 (MSD)
From: Maxim Konovalov <maxim@macomnet.ru>
To: Mike Silbersack <silby@silby.com>
In-Reply-To: <20050513005221.S731@odysseus.silby.com>
Message-ID: <20050513162930.B12839@mp2.macomnet.net>
References: <BEA93507.1B3D1%gandalf@digital.net>
	<20050513005221.S731@odysseus.silby.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-net@freebsd.org
cc: Suleiman Souhlal <ssouhlal@freebsd.org>
cc: Gandalf The White <gandalf@digital.net>
Subject: Re: FreeBSD and the Rose Attack / NewDawn
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 13 May 2005 12:32:15 -0000

[...]
> So, test out my attached patch with varying settings of
> maxfragspersecond and see if it makes any difference for you.

[...]
diff -u -r /usr/src/sys.old/netinet/ip_var.h /usr/src/sys/netinet/ip_var.h
--- /usr/src/sys.old/netinet/ip_var.h	Sun Apr 17 18:05:06 2005
+++ /usr/src/sys/netinet/ip_var.h	Thu May 12 21:16:47 2005
@@ -61,6 +61,8 @@
 	struct mbuf *ipq_frags;		/* to ip headers of fragments */
 	struct	in_addr ipq_src,ipq_dst;
 	u_char	ipq_nfrags;		/* # frags in this packet */
+	u_short ipq_len;		/* length of final packet */
+	u_short ipq_curlen;		/* how much we've gotten so far */
 	struct label *ipq_label;		/* MAC label */
 };
 #endif /* _KERNEL */
%%%

Am I right the above delta is a letfover from Suleiman's work and it's
not needed at all?

-- 
Maxim Konovalov