Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 May 2001 02:46:44 -0400
From:      Alfred Perlstein <bright@rush.net>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        net@FreeBSD.ORG
Subject:   Re: Randomized IP ID patch
Message-ID:  <20010526024644.I17514@superconductor.rush.net>
In-Reply-To: <20010525233811.A44455@xor.obsecurity.org>; from kris@obsecurity.org on Fri, May 25, 2001 at 11:38:12PM -0700
References:  <20010525233811.A44455@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
* Kris Kennaway <kris@obsecurity.org> [010526 02:38] wrote:
> A while back I posted a version of this which was activated by sysctl,
> but people didn't like the per-packet performance overhead, so here's
> an updated version which uses a compile-time option.  Please review;
> I'd like to commit this soon.
>

This seems pretty cool, I'm suprised you had people objecting to
a single check of whether or not to run an external function.
(I'd rather see this configurable while the system is running).

-Alfred 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010526024644.I17514>