=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/35.html,v retrieving revision 1.33 retrieving revision 1.34 diff -u -r1.33 -r1.34 --- www/35.html 2004/03/24 13:53:44 1.33 +++ www/35.html 2004/03/24 14:41:33 1.34 @@ -96,7 +96,7 @@
  • Sticky-address (the flexibility of round-robin with the benefits of source-hash).
  • Invert the specific/general socket match order when redirecting to - localhost (Prevents the potential security problem of remote connections + localhost (prevents the potential security problem of remote connections being identified as local).
  • Significant improvements to interface handling. @@ -141,14 +141,14 @@ now supports logging to memory buffers, to be read using syslogc(8). This is useful for diskless devices. -
  • IPsec ESP in UDP encapsulation +
  • IPsec ESP in UDP encapsulation.
  • -malloc(3) randomization and guard pages. This helps detecting out-of-bounds +malloc(3) randomization and guard pages. This helps to detect out-of-bounds reads and writes.

    -

  • New Privilege Separation Functionality: +
  • Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process: