mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Set the ephemeral port range starting port to 1024 instead of 49152.

Browse Source
This commit is contained in:
Scott Ullrich 2007-07-05 16:13:38 +00:00
parent 343d3464a8
commit df23ccfe82
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cf/conf/config.xml
View File

@ -5,6 +5,11 @@
<lastchange></lastchange>
<theme>nervecenter</theme>
<sysctl>
<item>
<desc>Set the ephemeral port range to be lower.</desc>
<tunable>net.inet.ip.portrange.first</tunable>
<value>1024</value>
</item>
<item>
<desc>Drop packets to closed TCP ports without returning a RST</desc>
<tunable>net.inet.tcp.blackhole</tunable>

5
conf.default/config.xml
View File

@ -5,6 +5,11 @@
<lastchange></lastchange>
<theme>nervecenter</theme>
<sysctl>
<item>
<desc>Set the ephemeral port range to be lower.</desc>
<tunable>net.inet.ip.portrange.first</tunable>
<value>1024</value>
</item>
<item>
<desc>Drop packets to closed TCP ports without returning a RST</desc>
<tunable>net.inet.tcp.blackhole</tunable>