INTRO (7) NetBSD Miscellaneous Information Manual INTRO (7 ...

SYSCTL (7) NetBSD Miscellaneous Information Manual SYSCTL (7)
node information queries can have a security impact, it is possible to fine tune which
responses should be answered. Tw o separate bits can be set.
1 Respond to ICMPv6 FQDN queries, e.g. ping6 -w.
2 Respond to ICMPv6 node addresses queries, e.g. ping6 -a.
icmp6.rediraccept
If set to non-zero, the host will accept ICMPv6 redirect packets. Note that IPv6 routers
will never accept ICMPv6 redirect packets, and the variable is meaningful on IPv6 hosts
(non-router ) only.
icmp6.redirtimeout
The variable specifies lifetime of routing entries generated by incoming ICMPv6 redirect.
udp6.do_loopback_cksum
Perform UDP checksum on loopback.
udp6.recvspace
Default UDP receive buffer size.
udp6.sendspace
Default UDP send buffer size.
We reuse net.∗.tcp for TCP over IPv6, and therefore we do not have variables net.∗.tcp6. Variables
net.inet6.udp6 have identical meaning to net.inet.udp. Please refer to PF_INET section above.
For variables net.∗.ipsec6, please refer to ipsec(4).
net.key (PF_KEY)
Get or set various global information about the IPsec key management. The third level name is the
variable name. The currently defined variable and names are:
Variable name Type Changeable
debug
integer yes
spi_try
integer yes
spi_min_value integer yes
spi_max_value integer yes
larval_lifetime integer yes
blockacq_count integer yes
blockacq_lifetime integer yes
esp_keymin integer yes
esp_auth integer yes
ah_keymin integer yes
The variables are as follows:
debug
Turn on debugging message from within the kernel. The value is a bitmap, as defined in
/usr/include/netkey/key_debug.h.
spi_try
The number of times the kernel will try to obtain an unique SPI when it generates it
from random number generator.
spi_min_value
Minimum SPI value when generating it within the kernel.
spi_max_value
Maximum SPI value when generating it within the kernel.
NetBSD 3.0 December 27, 2007 24