Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 Oct 2003 08:40:32 -0700
From:      Sam Leffler <sam@errno.com>
To:        Hajimu UMEMOTO <ume@FreeBSD.org>, src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sys/conf files src/sys/netinet6 ip6_id.c ip6_output.c ip6_var.h
Message-ID:  <200310010840.32893.sam@errno.com>
In-Reply-To: <200310011513.h91FDU09008281@repoman.freebsd.org>

index | next in thread | previous in thread | raw e-mail

On Wednesday 01 October 2003 08:13 am, Hajimu UMEMOTO wrote:
> ume         2003/10/01 08:13:30 PDT
>
>   FreeBSD src repository
>
>   Modified files:
>     sys/conf             files
>     sys/netinet6         ip6_output.c ip6_var.h
>   Added files:
>     sys/netinet6         ip6_id.c
>   Log:
>   randomize IPv6 fragment ID.

The cost of doing this was argued extensively on the netbsd mailing lists. In 
FreeBSD, for IPv4, it is conditional on RANDOM_IP_ID.  Is there any reason 
this is being done for IPv6 other than to defeat attacks?  If not can you 
please make it conditional in the same way?

	Sam


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200310010840.32893.sam>