From owner-freebsd-stable  Wed Apr 18 11: 6:22 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-27.dsl.lsan03.pacbell.net [63.207.60.27])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3D39237B422; Wed, 18 Apr 2001 11:06:12 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 2E54366F19; Wed, 18 Apr 2001 11:06:11 -0700 (PDT)
Date: Wed, 18 Apr 2001 11:06:11 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: stable@FreeBSD.org
Cc: qa@FreeBSD.org
Subject: HEADS UP: New TCP Initial Sequence number code
Message-ID: <20010418110610.C35494@xor.obsecurity.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="7gGkHNMELEOhSGF6"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


--7gGkHNMELEOhSGF6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi all,

Due to unfortunate reasons of timing, we have had to commit some fixes
to the code which generates TCP initial sequence numbers to make sure
it gets into 4.3-RELEASE.  This code is taken from OpenBSD where it
has been in successful operation for 5 months, but it is not
impossible there are corner cases.

I would like everyone who possibly can do so to test this on their
systems since release is only 2 days away.  Machines which experience
(or can be made to experience) moderate to high connection load would
be the best to test with; look for anything "out of the ordinary" --
higher connection failure rates, 'stuck' sockets which don't time out
and disappear on the server, data corruption of transferred data, etc.

Let me stress that I have no reason to believe this patch introduces
such problems, but it needs to be tested as much as possible in the
remaining time before release.  I'm sorry for having to introduce this
change at such a late date, but it was necessary for reasons which
will become clear at a later date.

Any help people can give here will benefit the other users of
4.3-RELEASE once it goes out the door.  Thanks!

Kris

--7gGkHNMELEOhSGF6
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE63deSWry0BWjoQKURAgrBAJ4moGONa9TJnVOwL8Pg5eZ2JxB9/gCg31Qm
vF9md1gG/Rk4kutNwJOdtFU=
=LiDt
-----END PGP SIGNATURE-----

--7gGkHNMELEOhSGF6--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message