Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 1 Oct 2003 08:40:32 -0700
From:      Sam Leffler <sam@errno.com>
To:        Hajimu UMEMOTO <ume@FreeBSD.org>, src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sys/conf files src/sys/netinet6 ip6_id.c ip6_output.c ip6_var.h
Message-ID:  <200310010840.32893.sam@errno.com>
In-Reply-To: <200310011513.h91FDU09008281@repoman.freebsd.org>
References:  <200310011513.h91FDU09008281@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday 01 October 2003 08:13 am, Hajimu UMEMOTO wrote:
> ume         2003/10/01 08:13:30 PDT
>
>   FreeBSD src repository
>
>   Modified files:
>     sys/conf             files
>     sys/netinet6         ip6_output.c ip6_var.h
>   Added files:
>     sys/netinet6         ip6_id.c
>   Log:
>   randomize IPv6 fragment ID.

The cost of doing this was argued extensively on the netbsd mailing lists. In 
FreeBSD, for IPv4, it is conditional on RANDOM_IP_ID.  Is there any reason 
this is being done for IPv6 other than to defeat attacks?  If not can you 
please make it conditional in the same way?

	Sam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200310010840.32893.sam>