Files
linux/include/net
Patrick McHardy f264a7df08 [NETFILTER]: nf_conntrack_expect: introduce nf_conntrack_expect_max sysct
As a last step of preventing DoS by creating lots of expectations, this
patch introduces a global maximum and a sysctl to control it. The default
is initialized to 4 * the expectation hash table size, which results in
1/64 of the default maxmimum of conntracks.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-07-10 22:18:12 -07:00
..
2007-07-10 22:16:43 -07:00
2007-06-13 20:44:42 +00:00
2006-12-02 21:22:55 -08:00
2007-07-10 12:41:08 -04:00
2005-08-29 15:32:25 -07:00
2007-07-10 22:15:41 -07:00
2006-09-28 18:01:06 -07:00
2006-12-02 21:23:41 -08:00
2005-09-22 07:57:21 -03:00
2006-03-20 22:59:36 -08:00
2006-12-02 21:22:52 -08:00
2005-08-29 16:01:32 -07:00
2005-08-29 15:32:25 -07:00
2007-07-10 22:14:20 -07:00
2007-04-25 22:27:56 -07:00
2007-06-07 13:40:50 -07:00
2007-07-10 22:16:53 -07:00