From 63a0de0c2964a665a1e813c8dffc2cd123acc1d2 Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Thu, 5 Jul 2007 16:14:56 +0000 Subject: [PATCH] Set the ephemeral port range starting port to 1024 instead of 49152. On a busy firewall it is possible to run out of ephemeral ports and then the system will block new connections until a port is available. --- etc/sysctl.conf | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/etc/sysctl.conf b/etc/sysctl.conf index b34e8b3c70..2f661ce276 100644 --- a/etc/sysctl.conf +++ b/etc/sysctl.conf @@ -17,5 +17,6 @@ net.inet.udp.maxdgram=57344 kern.rndtest.verbose=0 net.link.bridge.pfil_onlyip=0 net.link.tap.user_open=1 -# The system will attempt to calculate the bandwidth delay product for each connection and limit the amount of data queued to the network to just the amount required to maintain optimum throughput. -net.inet.tcp.inflight.enable=3 \ No newline at end of file +# The system will attempt to calculate the bandwidth delay product for each connection and limit the amount of data queued to the network to just the amount required to maintain optimum throughput. +net.inet.tcp.inflight.enable=3 +net.inet.ip.portrange.first=1024