Page MenuHomeFreeBSD

Add net.inet.ip.source_address_validation
ClosedPublic

Authored by glebius on Nov 9 2021, 8:35 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, May 22, 3:09 AM
Unknown Object (File)
Wed, May 22, 12:03 AM
Unknown Object (File)
Tue, May 21, 1:57 PM
Unknown Object (File)
Tue, May 21, 11:15 AM
Unknown Object (File)
Sun, May 19, 9:07 PM
Unknown Object (File)
Sun, May 19, 7:16 PM
Unknown Object (File)
Sun, May 19, 7:09 PM
Unknown Object (File)
Sun, May 19, 1:20 PM
Subscribers

Details

Summary

Drop packets arriving from the network that have our source IP
address. If maliciously crafted they can create evil effects
like an RST exchange between two of our listening TCP ports.
Such packets just can't be legitimate. Enable the tunable
by default. Long time due for a modern Internet host.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 42683
Build 39571: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Nov 9 2021, 9:47 PM
This revision now requires review to proceed.Nov 11 2021, 12:30 AM

Thank you for including the fib.

This revision is now accepted and ready to land.Nov 11 2021, 7:55 AM
This revision was automatically updated to reflect the committed changes.