Messages in this thread | | | Date | Thu, 02 Jul 2015 10:23:27 +0200 | From | Nicolas Dichtel <> | Subject | Re: [PATCH] add stealth mode |
| |
Le 02/07/2015 00:53, Matteo Croce a écrit : > Add option to disable any reply not related to a listening socket, > like RST/ACK for TCP and ICMP Dest-Unreach for UDP. > Also disables ICMP replies to echo request and timestamp. > The stealth mode can be enabled selectively for a single interface. > --- > include/linux/inetdevice.h | 1 + > include/linux/ipv6.h | 1 + > include/uapi/linux/ip.h | 1 + > net/ipv4/devinet.c | 1 + > net/ipv4/icmp.c | 6 ++++++ > net/ipv4/tcp_ipv4.c | 3 ++- > net/ipv4/udp.c | 4 +++- > net/ipv6/addrconf.c | 7 +++++++ > net/ipv6/icmp.c | 3 ++- > net/ipv6/tcp_ipv6.c | 2 +- > net/ipv6/udp.c | 3 ++- > 11 files changed, 27 insertions(+), 5 deletions(-)
It is recommended to add an explanation of new sysctl here: Documentation/networking/ip-sysctl.txt
| |