aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMaxim Konovalov <maxim@FreeBSD.org>2004-07-02 15:47:47 +0000
committerMaxim Konovalov <maxim@FreeBSD.org>2004-07-02 15:47:47 +0000
commita65cfc98ff052c393b5b80fc7f52fd0b94eb9853 (patch)
treeed09513405e0c72caffc1ab87d45b90b2c1c5b8d
parenta92c890fd179386f34a4d4a91993c1eedb8ae056 (diff)
downloadsrc-a65cfc98ff052c393b5b80fc7f52fd0b94eb9853.tar.gz
src-a65cfc98ff052c393b5b80fc7f52fd0b94eb9853.zip
Document net.inet.ip.process_options sysctl.
Improved by: ru Reviewed by: andre
Notes
Notes: svn path=/head/; revision=131462
-rw-r--r--share/man/man4/inet.415
1 files changed, 15 insertions, 0 deletions
diff --git a/share/man/man4/inet.4 b/share/man/man4/inet.4
index b922bf91ca87..2f43436ad291 100644
--- a/share/man/man4/inet.4
+++ b/share/man/man4/inet.4
@@ -273,6 +273,21 @@ adaptation described above.
.Pq ip.rtmaxcache
Integer: trigger level of cached, unreferenced, protocol-cloned routes
which initiates dynamic adaptation (default 128).
+.It Va ip.process_options
+Integer: control IP options processing.
+By setting this variable to 0, all IP options in the incoming packets
+will be ignored, and the packets will be passed unmodified.
+By setting to 1, IP options in the incoming packets will be processed
+accordingly.
+By setting to 2, an
+.Tn ICMP
+.Dq "prohibited by filter"
+message will be sent back in respose to incoming packets with IP options.
+Default is 1.
+This
+.Xr sysctl 8
+variable affects packets destined for a local host as well as packets
+forwarded to some other host.
.El
.Sh SEE ALSO
.Xr ioctl 2 ,