]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Change the default port range for outgoing connections by introducing
authorrpaulo <rpaulo@FreeBSD.org>
Tue, 4 Mar 2008 19:16:21 +0000 (19:16 +0000)
committerrpaulo <rpaulo@FreeBSD.org>
Tue, 4 Mar 2008 19:16:21 +0000 (19:16 +0000)
commit74f471aa5cf5bd53bce113fed3d0f77b5dbb534b
tree064c21c9a6ada7c2e05994e23247134c92d7a6cb
parenta60b2dd234cc4b623d43cbf6258d173dcded14ca
Change the default port range for outgoing connections by introducing
IPPORT_EPHEMERALFIRST and IPPORT_EPHEMERALLAST with values
10000 and 65535 respectively.
The rationale behind is that it makes the attacker's life more
difficult if he/she wants to guess the ephemeral port range and
also lowers the probability of a port colision (described in
draft-ietf-tsvwg-port-randomization-01.txt).

While there, remove code duplication in in_pcbbind_setup().

Submitted by: Fernando Gont <fernando at gont.com.ar>
Approved by: njl (mentor)
Reviewed by: silby, bms
Discussed on: freebsd-net
sys/netinet/in.h
sys/netinet/in_pcb.c