HardenedBSD/share
Michael Tuexen 646c28ea80 tcp: improve SEG.ACK validation
Implement the improved SEG.ACK validation described in RFC 5961.
In addition to that, also detect ghost ACKs, which are ACKs for data
that has never been sent.
The additional checks are enabled by default, but can be disabled
by setting the sysctl-variable net.inet.tcp.insecure_ack to a
non-zero value.

PR:			250357
Reviewed by:		Peter Lei, rscheff (older version)
MFC after:		1 week
Sponsored by:		Netflix, Inc.
Differential Revision:	https://reviews.freebsd.org/D45894
2024-07-21 11:37:35 +02:00
..
colldef Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
colldef_unicode
ctypedef Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
dict Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
doc Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
dtrace libdtrace: decode all tcp header flags and add 2023-12-31 15:02:03 +01:00
examples Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
i18n Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
keys Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
man tcp: improve SEG.ACK validation 2024-07-21 11:37:35 +02:00
misc Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
mk Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
monetdef
monetdef_unicode
msgdef
msgdef_unicode
numericdef Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
numericdef_unicode
security Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
sendmail
skel Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
snmp Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
syscons Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
tabset Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
termcap Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
tests Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
timedef Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
vt Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
zoneinfo Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
Makefile Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
Makefile.inc Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00