mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add overlooked sysctl's.

Browse Source
This commit is contained in:
Scott Ullrich 2007-05-26 22:34:48 +00:00
parent eaa86e4539
commit 9299ceaf2c
2 changed files with 70 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
cf/conf/config.xml
View File

@ -5,6 +5,41 @@
<lastchange></lastchange>
<theme>nervecenter</theme>
<sysctl>
<item>
<desc>Drop packets to closed TCP ports without returning a RST</desc>
<tunable>net.inet.tcp.blackhole</tunable>
<value>2</value>
</item>
<item>
<desc>Do not send ICMP port unreachable messages for closed UDP ports</desc>
<tunable>net.inet.udp.blackhole</tunable>
<value>1</value>
</item>
<item>
<desc>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</desc>
<tunable>net.inet.ip.random_id</tunable>
<value>1</value>
</item>
<item>
<desc>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</desc>
<tunable>net.inet.tcp.drop_synfin</tunable>
<value>1</value>
</item>
<item>
<desc>Disable sending IPv4 redirects</desc>
<tunable>net.inet.ip.redirect</tunable>
<value>0</value>
</item>
<item>
<desc>Disable sending IPv6 redirects</desc>
<tunable>net.inet6.ip6.redirect</tunable>
<value>0</value>
</item>
<item>
<desc>Generate SYN cookies for outbound SYN-ACK packets</desc>
<tunable>net.inet.tcp.syncookies</tunable>
<value>1</value>
</item>
<item>
<desc>Maximum incoming/outgoing TCP datagram size (receive)</desc>
<tunable>net.inet.tcp.recvspace</tunable>

35
conf.default/config.xml
View File

@ -5,6 +5,41 @@
<lastchange></lastchange>
<theme>nervecenter</theme>
<sysctl>
<item>
<desc>Drop packets to closed TCP ports without returning a RST</desc>
<tunable>net.inet.tcp.blackhole</tunable>
<value>2</value>
</item>
<item>
<desc>Do not send ICMP port unreachable messages for closed UDP ports</desc>
<tunable>net.inet.udp.blackhole</tunable>
<value>1</value>
</item>
<item>
<desc>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</desc>
<tunable>net.inet.ip.random_id</tunable>
<value>1</value>
</item>
<item>
<desc>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</desc>
<tunable>net.inet.tcp.drop_synfin</tunable>
<value>1</value>
</item>
<item>
<desc>Disable sending IPv4 redirects</desc>
<tunable>net.inet.ip.redirect</tunable>
<value>0</value>
</item>
<item>
<desc>Disable sending IPv6 redirects</desc>
<tunable>net.inet6.ip6.redirect</tunable>
<value>0</value>
</item>
<item>
<desc>Generate SYN cookies for outbound SYN-ACK packets</desc>
<tunable>net.inet.tcp.syncookies</tunable>
<value>1</value>
</item>
<item>
<desc>Maximum incoming/outgoing TCP datagram size (receive)</desc>
<tunable>net.inet.tcp.recvspace</tunable>