From owner-freebsd-security Tue Jan 25 21: 2: 7 2000 Delivered-To: freebsd-security@freebsd.org Received: from apollo.backplane.com (apollo.backplane.com [216.240.41.2]) by hub.freebsd.org (Postfix) with ESMTP id 0B23C14E2A for ; Tue, 25 Jan 2000 21:02:05 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.9.3/8.9.1) id VAA08010; Tue, 25 Jan 2000 21:02:03 -0800 (PST) (envelope-from dillon) Date: Tue, 25 Jan 2000 21:02:03 -0800 (PST) From: Matthew Dillon Message-Id: <200001260502.VAA08010@apollo.backplane.com> To: Alfred Perlstein Cc: Warner Losh , security@FreeBSD.ORG Subject: Re: Merged patches References: <200001251733.JAA04770@apollo.backplane.com> <200001251637.JAA04226@harmony.village.org> <200001251733.JAA04770@apollo.backplane.com> <200001251736.KAA04666@harmony.village.org> <20000125114820.V26520@fw.wintelcom.net> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org :I do agree that the code for it should be marked so that people using :our stack for reference can maybe define NOICMP_BANDLIM and get the :less self-preserving code. :Imagine if our inetd didn't offer rate limiting unless it was compiled :with certain defines. : :-Alfred I think for this release ICMP_BANDLIM can simply be enabled in GENERIC. It would not be wise to go through the code and reverse the sense of all the conditionals and then have to retest everything to make sure we haven't bof'd it. -Matt Matthew Dillon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message