Date: Fri, 4 Dec 1998 11:54:40 -0800 (PST) From: Matthew Dillon <dillon@apollo.backplane.com> To: Bruce Evans <bde@zeta.org.au> Cc: ache@nagual.pp.ru, dillon@apollo.backplane.com, cvs-all@FreeBSD.ORG, cvs-committers@FreeBSD.ORG Subject: Re: cvs commit: src/sys/netinet icmp_var.h Message-ID: <199812041954.LAA16937@apollo.backplane.com> References: <199812040900.UAA15573@godzilla.zeta.org.au>
next in thread | previous in thread | raw e-mail | index | archive | help
:
:> I really do not want to throw multiple externs into the code, and I
:> can't localize the rate limit to the icmp module because there is a
:> critical piece in the tcp module that rate-limits dropwithreset for
:> SYN's received to non-existent ports (a common attack mode) which has
:> nothing to do with ICMP packets.
:
:In that case, the prototype shouldn't be declared in an icmp header and
:the option name shouldn't begin with ICMP.
:
:Bruce
Well, most uses of the code are related to ICMP responses. The TCP
case is a special case.
Boy, that's real helpful Bruce. If you have a *solution* you
want to share with us, be my guest!
-Matt
Matthew Dillon Engineering, HiWay Technologies, Inc. & BEST Internet
Communications & God knows what else.
<dillon@backplane.com> (Please include original email in any response)
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812041954.LAA16937>