1a7872406Smeem# 274e20cfeSnh145002# Copyright 2007 Sun Microsystems, Inc. All rights reserved. 3a7872406Smeem# Use is subject to license terms. 4a7872406Smeem# 5a7872406Smeem# CDDL HEADER START 6a7872406Smeem# 7a7872406Smeem# The contents of this file are subject to the terms of the 874e20cfeSnh145002# Common Development and Distribution License (the "License"). 974e20cfeSnh145002# You may not use this file except in compliance with the License. 10a7872406Smeem# 11a7872406Smeem# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 12a7872406Smeem# or http://www.opensolaris.org/os/licensing. 13a7872406Smeem# See the License for the specific language governing permissions 14a7872406Smeem# and limitations under the License. 15a7872406Smeem# 16a7872406Smeem# When distributing Covered Code, include this CDDL HEADER in each 17a7872406Smeem# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 18a7872406Smeem# If applicable, add the following below this CDDL HEADER, with the 19a7872406Smeem# fields enclosed by brackets "[]" replaced with your own identifying 20a7872406Smeem# information: Portions Copyright [yyyy] [name of copyright owner] 21a7872406Smeem# 22a7872406Smeem# CDDL HEADER END 23a7872406Smeem# 24a7872406Smeem# ident "%Z%%M% %I% %E% SMI" 25a7872406Smeem# 26a7872406Smeem# TCP_STRONG_ISS sets the TCP initial sequence number generation parameters. 27a7872406Smeem# Set TCP_STRONG_ISS to be: 28a7872406Smeem# 0 = Old-fashioned sequential initial sequence number generation. 29a7872406Smeem# 1 = Improved sequential generation, with random variance in increment. 30a7872406Smeem# 2 = RFC 1948 sequence number generation, unique-per-connection-ID. 31a7872406Smeem# 32*680047a5SDan McDonaldTCP_STRONG_ISS=2 33a7872406Smeem# 34a7872406Smeem# ACCEPT6TO4RELAY sets the policy for 6to4 tunnels communicating with 6to4 35a7872406Smeem# Relay Routers as defined in RFC 3056. Traffic sent from a 6to4 site to a 36a7872406Smeem# native IPv6 host will be tunneled over the IPv4 Internet to a 6to4 Relay 37a7872406Smeem# Router before being delivered to the native IPv6 host. Enabling support 38a7872406Smeem# for sending/receiving traffic to/from a 6to4 Relay Router can create a 39a7872406Smeem# security risk for a 6to4 site, since there is no default trust 40a7872406Smeem# mechanism for communicating with Relay Routers. Communication support 41a7872406Smeem# with 6to4 Relay Routers has been disabled by default. ACCEPT6TO4RELAY 42a7872406Smeem# can be set to the following values: 43a7872406Smeem# NO = Disables communication with 6to4 Relay Routers 44a7872406Smeem# YES = Enables communication with 6to4 Relay Routers and thus native 45a7872406Smeem# IPv6 hosts through a 6to4 tunnel. 46a7872406Smeem# 47a7872406Smeem# When ACCEPT6TO4RELAY=YES, RELAY6TO4ADDR will be used to determine the 48a7872406Smeem# destination IPv4 address to be used as a tunnel endpoint when communicating 49a7872406Smeem# with 6to4 Relay Routers. 192.88.99.1 is the well-known 6to4 Relay Router 50a7872406Smeem# Anycast address as defined in RFC 3068. This value may be changed to 51a7872406Smeem# the IPv4 unicast address of a particular 6to4 Relay Router, if desired. 52a7872406Smeem# 53a7872406SmeemACCEPT6TO4RELAY=NO 54a7872406SmeemRELAY6TO4ADDR="192.88.99.1" 55