Re: OpenBSD's tcpdrop(8)

From: <gnn_at_freebsd.org> Date: Tue, 22 Feb 2005 13:49:27 +0900 · This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:28 UTC

At Mon, 21 Feb 2005 23:48:55 +0300 (MSK),
Maxim Konovalov wrote:
> Thank you very much for testing!  A version with the correct locking
> (rwatson_at_) and improved IPv6 (ume_at_) is already in the tree.
> 

Great.

> We do not allow to modify sysctls in jail by default (!CTLFLAG_PRISON
> case) so I think net.inet.tcp.drop is jail-safe.  And it does not
> allow to discover an existent (or non-existent) tcp connection in the
> host system from the jail.

Sounds good to me.

Later,
George