Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 May 2002 00:12:30 -0400
From:      Garance A Drosihn <drosih@rpi.edu>
To:        Mike Silbersack <silby@silby.com>, stable@FreeBSD.ORG
Subject:   Re: Heads Up: Accept filters fixed
Message-ID:  <p05111723b8f51b6e6633@[128.113.24.47]>
In-Reply-To: <20020430225620.D32402-200000@patrocles.silby.com>
References:  <20020430225620.D32402-200000@patrocles.silby.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 11:07 PM -0500 4/30/02, Mike Silbersack wrote:
>Just a quick note for those of you using accept filters with
>a 4.4+ kernel using the syncache:  Your accept filters are
>broken, and easily DoSable.
>
>The fix (attached) has now been committed to both 5.0 and 4.5,
>so I recommend doing one of two things if you're using accept
>filters:

How seriously are they broken?
Should this be MFC'ed into RELENG_4_5 ?  (security-patches branch)

-- 
Garance Alistair Drosehn            =   gad@gilead.netel.rpi.edu
Senior Systems Programmer           or  gad@freebsd.org
Rensselaer Polytechnic Institute    or  drosih@rpi.edu

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?p05111723b8f51b6e6633>