Changeset View

Standalone View

	Show First 20 Lines • Show All 1,176 Lines • ▼ Show 20 Lines
	.Dq Li YES			.Dq Li YES
	will cause the kernel to ignore TCP frames that have both			will cause the kernel to ignore TCP frames that have both
	the SYN and FIN flags set.			the SYN and FIN flags set.
	This prevents OS fingerprinting, but may			This prevents OS fingerprinting, but may
	break some legitimate applications.			break some legitimate applications.
	.It Va icmp_drop_redirect			.It Va icmp_drop_redirect
	.Pq Vt bool			.Pq Vt bool
	Set to			Set to
	.Dq Li NO			.Dq Li AUTO
	by default.			by default. This setting will take the value from
				.Va routed_enable
				instead, because redirect processing may cause perfomance issues
				for large routing tables.
	Setting to			Setting to
	.Dq Li YES			.Dq Li YES
	will cause the kernel to ignore ICMP REDIRECT packets.			will cause the kernel to ignore ICMP REDIRECT packets.
				Setting to
				.Dq Li NO
				will cause the kernel to process ICMP REDIRECT packets.
	Refer to			Refer to
	.Xr icmp 4			.Xr icmp 4
	for more information.			for more information.
	.It Va icmp_log_redirect			.It Va icmp_log_redirect
	.Pq Vt bool			.Pq Vt bool
	Set to			Set to
	.Dq Li NO			.Dq Li NO
	by default.			by default.
	▲ Show 20 Lines • Show All 3,485 Lines • Show Last 20 Lines