From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 26 Nov 2008 09:22:19 +0000 (-0000)
Subject: allow to globally disable DOS protection by setting charon.dos_protection to no.
X-Git-Tag: 4.2.10~91
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=69e9698b17261fed97c2bc22100e338ae7736bc7;p=thirdparty%2Fstrongswan.git

allow to globally disable DOS protection by setting charon.dos_protection to no.
---

diff --git a/src/charon/network/receiver.c b/src/charon/network/receiver.c
index 18a4b4f767..9c413526a1 100644
--- a/src/charon/network/receiver.c
+++ b/src/charon/network/receiver.c
@@ -382,6 +382,11 @@ receiver_t *receiver_create()
 									"charon.cookie_threshold", COOKIE_THRESHOLD_DEFAULT);
 	this->block_threshold = lib->settings->get_int(lib->settings,
 									"charon.block_threshold", BLOCK_THRESHOLD_DEFAULT);
+	if (!lib->settings->get_bool(lib->settings, "charon.dos_protection", TRUE))
+	{
+		this->cookie_threshold = 0;
+		this->block_threshold = 0;
+	}
 
 	this->job = callback_job_create((callback_job_cb_t)receive_packets,
 									this, NULL, NULL);