Date: Sun, 13 May 2001 01:22:29 -0400 From: Coleman Kane <cokane@FreeBSD.ORG> To: Dag-Erling Smorgrav <des@ofug.org> Cc: Retal <lirandb@netvision.net.il>, freebsd-security@FreeBSD.ORG Subject: Re: Some Kernel options, sc is broken Message-ID: <20010513012229.A561@cokane.yi.org> In-Reply-To: <xzp7kzplgel.fsf@flood.ping.uio.no>; from des@ofug.org on Thu, May 10, 2001 at 11:09:06AM %2B0200 References: <002601ba1df7$4da07940$b88f39d5@a> <xzp7kzplgel.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Well, their is brokeness here. The sc driver no longer reads the flags from the hints correctly. I realized this when my USB keyboard would not attach to the console if it was probed after boot. I have one of the early VIA 586 chips with a broken USB controller on it (windows uses the 'USB filter patch' to make it more reliable). Basically, sometimes it returns an error on probe and has to be unplugged and plugged back in until it works. Well, I can't set the flag to allow the sc driver to constantly probe until it finds a kbd, so I have to reboot remotely. I sent mail to the last committer and haven't gotten a reply. I haven't had the time or I would have fixed it myself. Dag-Erling Smorgrav had the audacity to say: > "Retal" <lirandb@netvision.net.il> writes: > > options KBD_INSTALL_CDEV # install a CDEV entry in /dev > > This option has no (visible) effect unless you use a USB keyboard. > > > options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN > > This option has no effect unless you set tcp_drop_synfin="YES" in > /etc/rc.conf. > > > options TCP_RESTRICT_RST #restrict emission of TCP RST > > Don't. Use blackhole(4) instead. > > > options ICMP_BANDLIM > > This option has an easily demonstrable effect: try running 'nmap -sS' > against your machine. > > > BTW: if i add TCP_DROP_SYNFIN, it should effect setup option in my > > firewall ?if it is, how ? > > See the rc.conf(5) man page. > > DES > -- > Dag-Erling Smorgrav - des@ofug.org > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010513012229.A561>