On Thu, 12 Jul 2001, Matt Dillon wrote:

>     yield an immediate improvement in available mbuf space.  For the receive
>     side of things we can't really do anything with existing connections
>     (because we've already advertised that the space is available to the
>     remote end),

In emergencies it should be easy enough to just not ack
the packets and drop them, this should cause the remote
end to slow down and the connection to use less memory.

Not the most elegant method, but probably usable DoS
protection.

cheers,

Rik
--
Virtual memory is like a game you can't win;
However, without VM there's truly nothing to lose...

http://www.surriel.com/         http://distro.conectiva.com/

Send all your spam to [EMAIL PROTECTED] (spam digging piggy)


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to