/usr/share/doc/secvpn/tcp-over-tcp/patches is in secvpn 2.23.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 | This is a multi-part message in MIME format.
--------------F6642C1C7500CF46658773D7
Content-Type: text/plain; charset=us-ascii;
name="drop_ip_forward_2.2.17.patch"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="drop_ip_forward_2.2.17.patch"
diff -u -r -2 kernel-source-2.2.17/include/linux/sysctl.h kernel-source-2.2.17.patch/include/linux/sysctl.h
--- kernel-source-2.2.17/include/linux/sysctl.h Wed Jun 7 23:26:44 2000
+++ kernel-source-2.2.17.patch/include/linux/sysctl.h Fri Oct 27 19:56:02 2000
@@ -229,5 +229,8 @@
NET_IPV4_IGMP_MAX_MEMBERSHIPS=65,
NET_IPV4_ALWAYS_DEFRAG=67,
- NET_IPV4_IP_MASQ_UDP_DLOOSE=68
+ NET_IPV4_IP_MASQ_UDP_DLOOSE=68,
+
+ /* UWE: changed here */
+ NET_IPV4_DROPPING=69
};
diff -u -r -2 kernel-source-2.2.17/include/net/snmp.h kernel-source-2.2.17.patch/include/net/snmp.h
--- kernel-source-2.2.17/include/net/snmp.h Sat Jun 24 10:25:46 2000
+++ kernel-source-2.2.17.patch/include/net/snmp.h Thu Oct 26 19:20:26 2000
@@ -47,4 +47,6 @@
unsigned long IpFragFails;
unsigned long IpFragCreates;
+ /* UWE: changed here */
+ unsigned long IpDropRate;
};
diff -u -r -2 kernel-source-2.2.17/net/ipv4/ip_forward.c kernel-source-2.2.17.patch/net/ipv4/ip_forward.c
--- kernel-source-2.2.17/net/ipv4/ip_forward.c Tue Jan 4 19:12:26 2000
+++ kernel-source-2.2.17.patch/net/ipv4/ip_forward.c Fri Oct 27 08:09:00 2000
@@ -76,4 +76,5 @@
struct rtable *rt; /* Route we use */
struct ip_options * opt = &(IPCB(skb)->opt);
+ unsigned int randval;
unsigned short mtu;
#if defined(CONFIG_FIREWALL) || defined(CONFIG_IP_MASQUERADE)
@@ -251,4 +252,12 @@
ip_statistics.IpForwDatagrams++;
+ /* UWE: changed here */
+ /* wenn's der Zufall will : */
+ get_random_bytes(&randval, sizeof(randval));
+ if (randval % 1000 < ip_statistics.IpDropRate) {
+ kfree_skb(skb);
+ return 0;
+ }
+
if (opt->optlen == 0) {
#ifdef CONFIG_NET_FASTROUTE
diff -u -r -2 kernel-source-2.2.17/net/ipv4/sysctl_net_ipv4.c kernel-source-2.2.17.patch/net/ipv4/sysctl_net_ipv4.c
--- kernel-source-2.2.17/net/ipv4/sysctl_net_ipv4.c Wed Jun 7 23:26:44 2000
+++ kernel-source-2.2.17.patch/net/ipv4/sysctl_net_ipv4.c Thu Oct 26 17:04:01 2000
@@ -129,4 +129,8 @@
&ipv4_devconf.forwarding, sizeof(int), 0644, NULL,
&ipv4_sysctl_forward,&ipv4_sysctl_forward_strategy},
+ /* UWE: changed here */
+ {NET_IPV4_DROPPING, "ip_drop_rate",
+ &ip_statistics.IpDropRate, sizeof(int), 0644, NULL,
+ &proc_dointvec},
{NET_IPV4_DEFAULT_TTL, "ip_default_ttl",
&ip_statistics.IpDefaultTTL, sizeof(int), 0644, NULL,
--------------F6642C1C7500CF46658773D7--
|