From owner-cvs-all  Thu Jun  8  8:34:55 2000
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id CA9D937BB52; Thu,  8 Jun 2000 08:34:52 -0700 (PDT)
	(envelope-from dan@FreeBSD.org)
Received: (from dan@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id IAA60972;
	Thu, 8 Jun 2000 08:34:52 -0700 (PDT)
	(envelope-from dan@FreeBSD.org)
Message-Id: <200006081534.IAA60972@freefall.freebsd.org>
From: Dan Moschuk <dan@FreeBSD.org>
Date: Thu, 8 Jun 2000 08:34:52 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sbin/ipfw ipfw.c ipfw.8 src/sys/netinet ip_fw.c
         ip_fw.h
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

dan         2000/06/08 08:34:52 PDT

  Modified files:
    sbin/ipfw            ipfw.c ipfw.8 
    sys/netinet          ip_fw.c ip_fw.h 
  Log:
  Add tcpoptions to ipfw.  This works much in the same way as ipoptions do.
  It also squashes 99% of packet kiddie synflood orgies.  For example, to
  rate syn packets without MSS,
  
  ipfw pipe 10 config 56Kbit/s queue 10Packets
  ipfw add pipe 10 tcp from any to any in setup tcpoptions !mss
  
  Submitted by:  Richard A. Steenbergen <ras@e-gerbil.net>
  
  Revision  Changes    Path
  1.84      +70 -6     src/sbin/ipfw/ipfw.c
  1.67      +20 -1     src/sbin/ipfw/ipfw.8
  1.138     +71 -1     src/sys/netinet/ip_fw.c
  1.51      +11 -1     src/sys/netinet/ip_fw.h



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message