From 21632b76e0f727bebdfb15cde61ea1d3cfb229d9 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Wed, 30 Jul 2008 08:27:08 +0000 Subject: [PATCH] added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check --- src/charon/network/receiver.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/src/charon/network/receiver.c b/src/charon/network/receiver.c index 1654f0e..6a887ec 100644 --- a/src/charon/network/receiver.c +++ b/src/charon/network/receiver.c @@ -96,6 +96,11 @@ struct private_receiver_t { * hasher to use for cookie calculation */ hasher_t *hasher; + + /** + * use denial of service protection mechanisms (cookies) + */ + bool dos_protection; }; /** @@ -282,7 +287,8 @@ static job_requeue_t receive_packets(private_receiver_t *this) } if (message->get_request(message) && - message->get_exchange_type(message) == IKE_SA_INIT) + message->get_exchange_type(message) == IKE_SA_INIT && + this->dos_protection) { /* check for cookies */ if (cookie_required(this, message)) @@ -367,6 +373,8 @@ receiver_t *receiver_create() this->secret_used = 0; this->rng->get_bytes(this->rng, SECRET_LENGTH, this->secret); memcpy(this->secret_old, this->secret, SECRET_LENGTH); + this->dos_protection = lib->settings->get_bool(lib->settings, + "charon.dos_protection", TRUE); this->job = callback_job_create((callback_job_cb_t)receive_packets, this, NULL, NULL); -- 2.7.4