[src/trunk]: src/doc new ip6 sysctls

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/27e54e852228
branches:  trunk
changeset: 779859:27e54e852228
user:      christos <christos%NetBSD.org@localhost>
date:      Sat Jun 23 03:16:03 2012 +0000

description:
new ip6 sysctls

diffstat:

 doc/CHANGES |  8 +++++++-
 1 files changed, 7 insertions(+), 1 deletions(-)

diffs (19 lines):

diff -r 86e033eca8f4 -r 27e54e852228 doc/CHANGES
--- a/doc/CHANGES       Sat Jun 23 03:13:41 2012 +0000
+++ b/doc/CHANGES       Sat Jun 23 03:16:03 2012 +0000
@@ -1,4 +1,4 @@
-# LIST OF CHANGES FROM LAST RELEASE:                   <$Revision: 1.1712 $>
+# LIST OF CHANGES FROM LAST RELEASE:                   <$Revision: 1.1713 $>
 #
 #
 # [Note: This file does not mention every change made to the NetBSD source tree.
@@ -69,3 +69,9 @@
        usb(9): Added support for SMP to the USB subsytem.  By Jared D.
                McNeill and myself.  [mrg 20120609]
        kernel: {send,recv}mmsg support [christos 20120621]
+       kernel: Add sysctls to avoid ipv6 DoS attacks (from OpenBSD):
+               net.inet6.ip6.neighborgcthresh = 2048
+               net.inet6.ip6.maxifprefixes = 16
+               net.inet6.ip6.maxifdefrouters = 16
+               net.inet6.ip6.maxdynroutes = 4096
+               [christos 20120622]