ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check

This commit is contained in:
Martin Willi 2008-07-30 08:27:08 +00:00
parent f5a0d968fc
commit 21632b76e0
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/charon/network/receiver.c
View File

@ -96,6 +96,11 @@ struct private_receiver_t {
* hasher to use for cookie calculation
*/
hasher_t *hasher;
/**
* use denial of service protection mechanisms (cookies)
*/
bool dos_protection;
};
/**
@ -282,7 +287,8 @@ static job_requeue_t receive_packets(private_receiver_t *this)
}
if (message->get_request(message) &&
message->get_exchange_type(message) == IKE_SA_INIT)
message->get_exchange_type(message) == IKE_SA_INIT &&
this->dos_protection)
{
/* check for cookies */
if (cookie_required(this, message))
@ -367,6 +373,8 @@ receiver_t *receiver_create()
this->secret_used = 0;
this->rng->get_bytes(this->rng, SECRET_LENGTH, this->secret);
memcpy(this->secret_old, this->secret, SECRET_LENGTH);
this->dos_protection = lib->settings->get_bool(lib->settings,
"charon.dos_protection", TRUE);
this->job = callback_job_create((callback_job_cb_t)receive_packets,
this, NULL, NULL);