diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2005-12-13 23:14:27 -0800 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-01-03 13:10:31 -0800 |
| commit | 89cee8b1cbb9dac40c92ef1968aea2b45f82fd18 (patch) | |
| tree | 01049841b15a9c2f3f136710382c7e4c11c1b1e5 /include/linux/sysctl.h | |
| parent | d5228a4f49db32d22a39c653281b527ef371129c (diff) | |
| download | linux-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.tar.gz linux-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.tar.bz2 linux-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.zip | |
[IPV4]: Safer reassembly
Another spin of Herbert Xu's "safer ip reassembly" patch
for 2.6.16.
(The original patch is here:
http://marc.theaimsgroup.com/?l=linux-netdev&m=112281936522415&w=2
and my only contribution is to have tested it.)
This patch (optionally) does additional checks before accepting IP
fragments, which can greatly reduce the possibility of reassembling
fragments which originated from different IP datagrams.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Arthur Kepner <akepner@sgi.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/linux/sysctl.h')
| -rw-r--r-- | include/linux/sysctl.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/linux/sysctl.h b/include/linux/sysctl.h index 4be34ef8c2f7..93fa765e47d3 100644 --- a/include/linux/sysctl.h +++ b/include/linux/sysctl.h @@ -390,6 +390,7 @@ enum NET_IPV4_ICMP_ERRORS_USE_INBOUND_IFADDR=109, NET_TCP_CONG_CONTROL=110, NET_TCP_ABC=111, + NET_IPV4_IPFRAG_MAX_DIST=112, }; enum { |