Page MenuHomeFreeBSD

Add net.inet.ip.source_address_validation
ClosedPublic

Authored by glebius on Nov 9 2021, 8:35 PM.
Tags
None
Referenced Files
F84780094: D32914.diff
Tue, May 28, 1:54 PM
Unknown Object (File)
Wed, May 22, 3:09 AM
Unknown Object (File)
Wed, May 22, 12:03 AM
Unknown Object (File)
Tue, May 21, 1:57 PM
Unknown Object (File)
Tue, May 21, 11:15 AM
Unknown Object (File)
Sun, May 19, 9:07 PM
Unknown Object (File)
Sun, May 19, 7:16 PM
Unknown Object (File)
Sun, May 19, 7:09 PM
Subscribers

Details

Summary

Drop packets arriving from the network that have our source IP
address. If maliciously crafted they can create evil effects
like an RST exchange between two of our listening TCP ports.
Such packets just can't be legitimate. Enable the tunable
by default. Long time due for a modern Internet host.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 42712
Build 39600: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Nov 9 2021, 9:47 PM
This revision now requires review to proceed.Nov 11 2021, 12:30 AM

Thank you for including the fib.

This revision is now accepted and ready to land.Nov 11 2021, 7:55 AM
This revision was automatically updated to reflect the committed changes.