Date: Thu, 8 Jun 2000 08:34:52 -0700 (PDT) From: Dan Moschuk <dan@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sbin/ipfw ipfw.c ipfw.8 src/sys/netinet ip_fw.c ip_fw.h Message-ID: <200006081534.IAA60972@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
dan 2000/06/08 08:34:52 PDT
Modified files:
sbin/ipfw ipfw.c ipfw.8
sys/netinet ip_fw.c ip_fw.h
Log:
Add tcpoptions to ipfw. This works much in the same way as ipoptions do.
It also squashes 99% of packet kiddie synflood orgies. For example, to
rate syn packets without MSS,
ipfw pipe 10 config 56Kbit/s queue 10Packets
ipfw add pipe 10 tcp from any to any in setup tcpoptions !mss
Submitted by: Richard A. Steenbergen <ras@e-gerbil.net>
Revision Changes Path
1.84 +70 -6 src/sbin/ipfw/ipfw.c
1.67 +20 -1 src/sbin/ipfw/ipfw.8
1.138 +71 -1 src/sys/netinet/ip_fw.c
1.51 +11 -1 src/sys/netinet/ip_fw.h
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200006081534.IAA60972>