OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
CVS: cvs.openbsd.org: src

From: Markus Friedl (markuscvs.openbsd.org)
Date: Thu Jun 30 2005 - 03:51:32 CDT

CVSROOT: /cvs
Module name: src
Changes by: markuscvs.openbsd.org 2005/06/30 02:51:31

Modified files:
        sys/netinet : ip_icmp.c tcp_input.c tcp_output.c tcp_subr.c
                         tcp_timer.c tcp_var.h

Log message:
implement PMTU checks from
http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
i.e. don't act on ICMP-need-frag immediately if adhoc checks on the
advertised mtu fail. the mtu update is delayed until a tcp retransmit
happens. initial patch by Fernando Gont, tested by many.