===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/35.html,v
retrieving revision 1.33
retrieving revision 1.34
diff -c -r1.33 -r1.34
*** www/35.html 2004/03/24 13:53:44 1.33
--- www/35.html 2004/03/24 14:41:33 1.34
***************
*** 96,102 ****
Sticky-address (the flexibility of round-robin with the benefits of
source-hash).
Invert the specific/general socket match order when redirecting to
! localhost (Prevents the potential security problem of remote connections
being identified as local).
Significant improvements to interface handling.
--- 96,102 ----
Sticky-address (the flexibility of round-robin with the benefits of
source-hash).
Invert the specific/general socket match order when redirecting to
! localhost (prevents the potential security problem of remote connections
being identified as local).
Significant improvements to interface handling.
***************
*** 141,154 ****
now supports logging to memory buffers, to be read using
syslogc(8).
This is useful for diskless devices.
! IPsec ESP in UDP encapsulation
! malloc(3) randomization and guard pages. This helps detecting out-of-bounds
reads and writes.
!
New Privilege Separation Functionality:
- isakmpd(8)
- named(8)
--- 141,154 ----
now supports logging to memory buffers, to be read using
syslogc(8).
This is useful for diskless devices.
!
- IPsec ESP in UDP encapsulation.
-
! malloc(3) randomization and guard pages. This helps to detect out-of-bounds
reads and writes.
!
Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process:
--- 530,536 ----
alt="OpenBSD">