From owner-cvs-all@FreeBSD.ORG  Mon Jan  3 07:08:38 2005
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6B42C16A4CE; Mon,  3 Jan 2005 07:08:38 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 487EA43D1D; Mon,  3 Jan 2005 07:08:38 +0000 (GMT)
	(envelope-from silby@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j0378cC6001450;
	Mon, 3 Jan 2005 07:08:38 GMT
	(envelope-from silby@repoman.freebsd.org)
Received: (from silby@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j0378cDc001449;
	Mon, 3 Jan 2005 07:08:38 GMT
	(envelope-from silby)
Message-Id: <200501030708.j0378cDc001449@repoman.freebsd.org>
From: Mike Silbersack <silby@FreeBSD.org>
Date: Mon, 3 Jan 2005 07:08:37 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/netinet tcp_input.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Jan 2005 07:08:38 -0000

silby       2005-01-03 07:08:37 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          tcp_input.c 
  Log:
  Add a sysctl (net.inet.tcp.insecure_rst) which allows one to specify
  that the RFC 793 specification for accepting RST packets should be
  following.  When followed, this makes one vulnerable to the attacks
  described in "slipping in the window", but it may be necessary in
  some odd circumstances.
  
  Revision  Changes    Path
  1.264     +7 -1      src/sys/netinet/tcp_input.c