From owner-cvs-all@FreeBSD.ORG  Tue Apr  1 11:19:44 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6ABE437B404; Tue,  1 Apr 2003 11:19:44 -0800 (PST)
Received: from freebie.xs4all.nl (freebie.xs4all.nl [213.84.32.253])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 9901C43FAF; Tue,  1 Apr 2003 11:19:42 -0800 (PST)
	(envelope-from wkb@freebie.xs4all.nl)
Received: from freebie.xs4all.nl (localhost [127.0.0.1])
	by freebie.xs4all.nl (8.12.8/8.12.8) with ESMTP id h31JJfmk011461;
	Tue, 1 Apr 2003 21:19:41 +0200 (CEST)
	(envelope-from wkb@freebie.xs4all.nl)
Received: (from wkb@localhost)
	by freebie.xs4all.nl (8.12.8/8.12.8/Submit) id h31JJf6n011460;
	Tue, 1 Apr 2003 21:19:41 +0200 (CEST)
Date: Tue, 1 Apr 2003 21:19:41 +0200
From: Wilko Bulte <wkb@freebie.xs4all.nl>
To: Nate Lawson <nate@root.org>
Message-ID: <20030401191941.GA11437@freebie.xs4all.nl>
References: <20030401082155.71CE037B4B9@hub.freebsd.org>
	<Pine.BSF.4.21.0304010924470.9750-100000@root.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Pine.BSF.4.21.0304010924470.9750-100000@root.org>
User-Agent: Mutt/1.4i
X-OS: FreeBSD 4.8-RC
X-PGP: finger wilko@freebsd.org
cc: cvs-src@FreeBSD.ORG
cc: src-committers@FreeBSD.ORG
cc: cvs-all@FreeBSD.ORG
cc: "Matthew N. Dodd" <mdodd@FreeBSD.ORG>
Subject: Re: cvs commit: src/sbin/ping ping.8 ping.c src/share/man/man4
	inet.4 ip.4 src/sys/netinet in.h in_pcb.h ip.h ip_input.c
	ip_output.c ip_var.h src/usr.bin/netstat inet.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2003 19:19:45 -0000

On Tue, Apr 01, 2003 at 09:25:45AM -0800, Nate Lawson wrote:
> On Tue, 1 Apr 2003, Matthew N. Dodd wrote:
> >   Modified files:
> >     sbin/ping            ping.8 ping.c 
> >     share/man/man4       inet.4 ip.4 
> >     sys/netinet          in.h in_pcb.h ip.h ip_input.c ip_output.c 
> >                          ip_var.h 
> >     usr.bin/netstat      inet.c 
> >   Log:
> >   Implement support for RFC 3514 (The Security Flag in the IPv4 Header).
> >   (See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt)
> >   
> >   This fulfills the host requirements for userland support by
> >   way of the setsockopt() IP_EVIL_INTENT message.
> 
> Back this out immediately!  It is evil!
> -Nate

It would be better if one would implement IP_EVIL_EMPIRE_REDMOND 
messages in addition to this one. One could then selectively catch
Msoft IP packets.

-- 
|   / o / /_  _   		wilko@FreeBSD.org
|/|/ / / /(  (_)  Bulte