189Smeem# 2*3422Snh145002# Copyright 2007 Sun Microsystems, Inc. All rights reserved. 389Smeem# Use is subject to license terms. 489Smeem# 589Smeem# CDDL HEADER START 689Smeem# 789Smeem# The contents of this file are subject to the terms of the 8*3422Snh145002# Common Development and Distribution License (the "License"). 9*3422Snh145002# You may not use this file except in compliance with the License. 1089Smeem# 1189Smeem# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 1289Smeem# or http://www.opensolaris.org/os/licensing. 1389Smeem# See the License for the specific language governing permissions 1489Smeem# and limitations under the License. 1589Smeem# 1689Smeem# When distributing Covered Code, include this CDDL HEADER in each 1789Smeem# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 1889Smeem# If applicable, add the following below this CDDL HEADER, with the 1989Smeem# fields enclosed by brackets "[]" replaced with your own identifying 2089Smeem# information: Portions Copyright [yyyy] [name of copyright owner] 2189Smeem# 2289Smeem# CDDL HEADER END 2389Smeem# 2489Smeem# ident "%Z%%M% %I% %E% SMI" 2589Smeem# 2689Smeem# TCP_STRONG_ISS sets the TCP initial sequence number generation parameters. 2789Smeem# Set TCP_STRONG_ISS to be: 2889Smeem# 0 = Old-fashioned sequential initial sequence number generation. 2989Smeem# 1 = Improved sequential generation, with random variance in increment. 3089Smeem# 2 = RFC 1948 sequence number generation, unique-per-connection-ID. 3189Smeem# 3289SmeemTCP_STRONG_ISS=1 3389Smeem# 3489Smeem# ACCEPT6TO4RELAY sets the policy for 6to4 tunnels communicating with 6to4 3589Smeem# Relay Routers as defined in RFC 3056. Traffic sent from a 6to4 site to a 3689Smeem# native IPv6 host will be tunneled over the IPv4 Internet to a 6to4 Relay 3789Smeem# Router before being delivered to the native IPv6 host. Enabling support 3889Smeem# for sending/receiving traffic to/from a 6to4 Relay Router can create a 3989Smeem# security risk for a 6to4 site, since there is no default trust 4089Smeem# mechanism for communicating with Relay Routers. Communication support 4189Smeem# with 6to4 Relay Routers has been disabled by default. ACCEPT6TO4RELAY 4289Smeem# can be set to the following values: 4389Smeem# NO = Disables communication with 6to4 Relay Routers 4489Smeem# YES = Enables communication with 6to4 Relay Routers and thus native 4589Smeem# IPv6 hosts through a 6to4 tunnel. 4689Smeem# 4789Smeem# When ACCEPT6TO4RELAY=YES, RELAY6TO4ADDR will be used to determine the 4889Smeem# destination IPv4 address to be used as a tunnel endpoint when communicating 4989Smeem# with 6to4 Relay Routers. 192.88.99.1 is the well-known 6to4 Relay Router 5089Smeem# Anycast address as defined in RFC 3068. This value may be changed to 5189Smeem# the IPv4 unicast address of a particular 6to4 Relay Router, if desired. 5289Smeem# 5389SmeemACCEPT6TO4RELAY=NO 5489SmeemRELAY6TO4ADDR="192.88.99.1" 55