:Below is a patch to fix the problem described in FreeBSD-SA-05:15.tcp, :which refers CAN-2005-0356 (or CERT VU#637934) and CAN-2005-2068. :( ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc ) : :It is imported from FreeBSD (tcp_input.c 1.270, 1.278 & tcp_seq.h 1.25). It looks good to me. -Matt