diff options
| author | Dag-Erling Smørgrav <des@FreeBSD.org> | 1999-09-12 17:22:08 +0000 |
|---|---|---|
| committer | Dag-Erling Smørgrav <des@FreeBSD.org> | 1999-09-12 17:22:08 +0000 |
| commit | e46cd3d4d2fb7232a6500e268cdb04e43461afbd (patch) | |
| tree | 026911f71b9ca57e5a40d2d77fc7a6625b5f89c3 /etc/rc.d | |
| parent | 58687472541a7cd52def066244dc820419270434 (diff) | |
Notes
Diffstat (limited to 'etc/rc.d')
| -rw-r--r-- | etc/rc.d/netoptions | 10 | ||||
| -rw-r--r-- | etc/rc.d/network1 | 10 | ||||
| -rw-r--r-- | etc/rc.d/network2 | 10 | ||||
| -rw-r--r-- | etc/rc.d/network3 | 10 | ||||
| -rw-r--r-- | etc/rc.d/routing | 10 |
5 files changed, 50 insertions, 0 deletions
diff --git a/etc/rc.d/netoptions b/etc/rc.d/netoptions index d1325255b4b9..781c73f11f1a 100644 --- a/etc/rc.d/netoptions +++ b/etc/rc.d/netoptions @@ -229,6 +229,16 @@ network_pass1() { sysctl -w net.inet.tcp.always_keepalive=1 >/dev/null fi + if [ "X$tcp_restrict_rst" = X"YES" ]; then + echo -n ' restrict TCP reset=YES' + sysctl -w net.inet.tcp.restrict_rst=1 >/dev/null + fi + + if [ "X$tcp_drop_synfin" = X"YES" ]; then + echo -n ' drop SYN+FIN packets=YES' + sysctl -w net.inet.tcp.drop_synfin=1 >/dev/null + fi + if [ "${ipxgateway_enable}" = "YES" ]; then echo -n ' IPX gateway=YES' sysctl -w net.ipx.ipx.ipxforwarding=1 >/dev/null diff --git a/etc/rc.d/network1 b/etc/rc.d/network1 index d1325255b4b9..781c73f11f1a 100644 --- a/etc/rc.d/network1 +++ b/etc/rc.d/network1 @@ -229,6 +229,16 @@ network_pass1() { sysctl -w net.inet.tcp.always_keepalive=1 >/dev/null fi + if [ "X$tcp_restrict_rst" = X"YES" ]; then + echo -n ' restrict TCP reset=YES' + sysctl -w net.inet.tcp.restrict_rst=1 >/dev/null + fi + + if [ "X$tcp_drop_synfin" = X"YES" ]; then + echo -n ' drop SYN+FIN packets=YES' + sysctl -w net.inet.tcp.drop_synfin=1 >/dev/null + fi + if [ "${ipxgateway_enable}" = "YES" ]; then echo -n ' IPX gateway=YES' sysctl -w net.ipx.ipx.ipxforwarding=1 >/dev/null diff --git a/etc/rc.d/network2 b/etc/rc.d/network2 index d1325255b4b9..781c73f11f1a 100644 --- a/etc/rc.d/network2 +++ b/etc/rc.d/network2 @@ -229,6 +229,16 @@ network_pass1() { sysctl -w net.inet.tcp.always_keepalive=1 >/dev/null fi + if [ "X$tcp_restrict_rst" = X"YES" ]; then + echo -n ' restrict TCP reset=YES' + sysctl -w net.inet.tcp.restrict_rst=1 >/dev/null + fi + + if [ "X$tcp_drop_synfin" = X"YES" ]; then + echo -n ' drop SYN+FIN packets=YES' + sysctl -w net.inet.tcp.drop_synfin=1 >/dev/null + fi + if [ "${ipxgateway_enable}" = "YES" ]; then echo -n ' IPX gateway=YES' sysctl -w net.ipx.ipx.ipxforwarding=1 >/dev/null diff --git a/etc/rc.d/network3 b/etc/rc.d/network3 index d1325255b4b9..781c73f11f1a 100644 --- a/etc/rc.d/network3 +++ b/etc/rc.d/network3 @@ -229,6 +229,16 @@ network_pass1() { sysctl -w net.inet.tcp.always_keepalive=1 >/dev/null fi + if [ "X$tcp_restrict_rst" = X"YES" ]; then + echo -n ' restrict TCP reset=YES' + sysctl -w net.inet.tcp.restrict_rst=1 >/dev/null + fi + + if [ "X$tcp_drop_synfin" = X"YES" ]; then + echo -n ' drop SYN+FIN packets=YES' + sysctl -w net.inet.tcp.drop_synfin=1 >/dev/null + fi + if [ "${ipxgateway_enable}" = "YES" ]; then echo -n ' IPX gateway=YES' sysctl -w net.ipx.ipx.ipxforwarding=1 >/dev/null diff --git a/etc/rc.d/routing b/etc/rc.d/routing index d1325255b4b9..781c73f11f1a 100644 --- a/etc/rc.d/routing +++ b/etc/rc.d/routing @@ -229,6 +229,16 @@ network_pass1() { sysctl -w net.inet.tcp.always_keepalive=1 >/dev/null fi + if [ "X$tcp_restrict_rst" = X"YES" ]; then + echo -n ' restrict TCP reset=YES' + sysctl -w net.inet.tcp.restrict_rst=1 >/dev/null + fi + + if [ "X$tcp_drop_synfin" = X"YES" ]; then + echo -n ' drop SYN+FIN packets=YES' + sysctl -w net.inet.tcp.drop_synfin=1 >/dev/null + fi + if [ "${ipxgateway_enable}" = "YES" ]; then echo -n ' IPX gateway=YES' sysctl -w net.ipx.ipx.ipxforwarding=1 >/dev/null |