From owner-cvs-src@FreeBSD.ORG  Tue Mar  4 19:16:32 2008
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 53E5F106566B;
	Tue,  4 Mar 2008 19:16:32 +0000 (UTC)
	(envelope-from rpaulo@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 480878FC21;
	Tue,  4 Mar 2008 19:16:32 +0000 (UTC)
	(envelope-from rpaulo@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m24JGWmr038228;
	Tue, 4 Mar 2008 19:16:32 GMT
	(envelope-from rpaulo@repoman.freebsd.org)
Received: (from rpaulo@localhost)
	by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m24JGMci038210;
	Tue, 4 Mar 2008 19:16:22 GMT (envelope-from rpaulo)
Message-Id: <200803041916.m24JGMci038210@repoman.freebsd.org>
From: Rui Paulo <rpaulo@FreeBSD.org>
Date: Tue, 4 Mar 2008 19:16:22 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/netinet in.h in_pcb.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Mar 2008 19:16:32 -0000

rpaulo      2008-03-04 19:16:22 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          in.h in_pcb.c 
  Log:
  Change the default port range for outgoing connections by introducing
  IPPORT_EPHEMERALFIRST and IPPORT_EPHEMERALLAST with values
  10000 and 65535 respectively.
  The rationale behind is that it makes the attacker's life more
  difficult if he/she wants to guess the ephemeral port range and
  also lowers the probability of a port colision (described in
  draft-ietf-tsvwg-port-randomization-01.txt).
  
  While there, remove code duplication in in_pcbbind_setup().
  
  Submitted by:   Fernando Gont <fernando at gont.com.ar>
  Approved by:    njl (mentor)
  Reviewed by:    silby, bms
  Discussed on:   freebsd-net
  
  Revision  Changes    Path
  1.101     +8 -4      src/sys/netinet/in.h
  1.199     +21 -40    src/sys/netinet/in_pcb.c