[src/trunk]: src document net.inet6.ip6.maxfrags

[itojun <itojun%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/9f597fe88daa
branches:  trunk
changeset: 531869:9f597fe88daa
user:      itojun <itojun%NetBSD.org@localhost>
date:      Tue May 28 03:17:26 2002 +0000

description:
document net.inet6.ip6.maxfrags

diffstat:

 lib/libc/gen/sysctl.3 |  8 +++++++-
 sbin/sysctl/sysctl.8  |  3 ++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diffs (46 lines):

diff -r e6f74f9d30fe -r 9f597fe88daa lib/libc/gen/sysctl.3
--- a/lib/libc/gen/sysctl.3     Tue May 28 03:04:05 2002 +0000
+++ b/lib/libc/gen/sysctl.3     Tue May 28 03:17:26 2002 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: sysctl.3,v 1.93 2002/05/19 08:12:55 itojun Exp $
+.\"    $NetBSD: sysctl.3,v 1.94 2002/05/28 03:17:27 itojun Exp $
 .\"
 .\" Copyright (c) 1993
 .\"    The Regents of the University of California.  All rights reserved.
@@ -956,6 +956,7 @@
 .It ip6        anonportmax     integer yes
 .It ip6        lowportmin      integer yes
 .It ip6        lowportmax      integer yes
+.It ip6        maxfrags        integer yes
 .It icmp6      rediraccept     integer yes
 .It icmp6      redirtimeout    integer yes
 .It icmp6      nd6_prune       integer yes
@@ -1075,6 +1076,11 @@
 This cannot be set to less than 0 or greater than 1024, and must
 be greater than
 .Li ip6.lowportmin .
+.It Li ip6.maxfrags
+The maximum number of fragments the node will accept.
+0 means that the node will not accept any fragments.
+-1 means that the node will accept as many fragments as it receives.
+The flag is provided basically for avoiding possible DoS attacks.
 .It Li icmp6.rediraccept
 If set to non-zero, the host will accept ICMPv6 redirect packets.
 Note that IPv6 routers will never accept ICMPv6 redirect packets,
diff -r e6f74f9d30fe -r 9f597fe88daa sbin/sysctl/sysctl.8
--- a/sbin/sysctl/sysctl.8      Tue May 28 03:04:05 2002 +0000
+++ b/sbin/sysctl/sysctl.8      Tue May 28 03:17:26 2002 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: sysctl.8,v 1.77 2002/05/19 08:12:56 itojun Exp $
+.\"    $NetBSD: sysctl.8,v 1.78 2002/05/28 03:17:26 itojun Exp $
 .\"
 .\" Copyright (c) 1993
 .\"    The Regents of the University of California.  All rights reserved.
@@ -312,6 +312,7 @@
 .It net.inet6.ip6.lowportmax   integer yes
 .It net.inet6.ip6.lowportmin   integer yes
 .It net.inet6.ip6.maxfragpackets       integer yes
+.It net.inet6.ip6.maxfrags     integer yes
 .It net.inet6.ip6.redirect     integer yes
 .It net.inet6.ip6.rr_prune     integer yes
 .It net.inet6.ip6.use_deprecated       integer yes