cvs commit: src/sbin/ping ping.8 ping.c src/share/man/man4 inet.4 ip.4 src/sys/netinet in.h in_pcb.h ip.h ip_input.c ip_output.c ip_var.h src/usr.bin/netstat inet.c

[Wilko Bulte]

On Tue, Apr 01, 2003 at 09:25:45AM -0800, Nate Lawson wrote:
> On Tue, 1 Apr 2003, Matthew N. Dodd wrote:
> >   Modified files:
> >     sbin/ping            ping.8 ping.c 
> >     share/man/man4       inet.4 ip.4 
> >     sys/netinet          in.h in_pcb.h ip.h ip_input.c ip_output.c 
> >                          ip_var.h 
> >     usr.bin/netstat      inet.c 
> >   Log:
> >   Implement support for RFC 3514 (The Security Flag in the IPv4 Header).
> >   (See: ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt)
> >   
> >   This fulfills the host requirements for userland support by
> >   way of the setsockopt() IP_EVIL_INTENT message.
> 
> Back this out immediately!  It is evil!
> -Nate

It would be better if one would implement IP_EVIL_EMPIRE_REDMOND 
messages in addition to this one. One could then selectively catch
Msoft IP packets.

-- 
|   / o / /_  _   		wilko at FreeBSD.org
|/|/ / / /(  (_)  Bulte