Chris Buechler
c0dfc944a3
disable TSO
2008-11-02 21:26:48 +00:00
Scott Ullrich
8bb574b6ad
Set net.inet.icmp.icmplim to 500. Apparently the low setting of 200
...
wrecked Seths firewall on upgrade due to overwhelming amounts of icmp
packets.
2008-09-01 19:41:58 +00:00
Scott Ullrich
f38ceb0d34
Disable TCP extended debugging.
2008-08-11 18:02:03 +00:00
Chris Buechler
ba1d09e924
no need to filter on bridge, only members.
2008-08-05 03:43:27 +00:00
Chris Buechler
a4b186ffe3
change this to a legit value (3, and any other non-zero number does the same thing as 1 which is what the correct value is)
2008-07-19 01:12:37 +00:00
Chris Buechler
e9ae3c834c
re-enable the sending of ICMP redirects by default
2008-06-14 17:27:26 +00:00
Scott Ullrich
2b907b9df3
Increase net.inet.ip.intr_queue_maxlen to 1000 which is the IP input queue.
2007-08-22 18:01:04 +00:00
Scott Ullrich
63a0de0c29
Set the ephemeral port range starting port to 1024 instead of 49152.
On a busy firewall it is possible to run out of ephemeral ports and then the system will block new connections until a port is available.
2007-07-05 16:14:56 +00:00
Scott Ullrich
8c685e7b11
Set net.inet.tcp.inflight.enable to 3 and gather feedback from users.
2007-05-25 16:59:49 +00:00
Scott Ullrich
2f17ee8602
hw.ata.wc is a read-only /boot/loader.conf value. Remove.
2007-04-17 18:11:05 +00:00
Scott Ullrich
752d210b74
Disable ATA write caching which should help with loosing configuration on invalid power off events.
2007-04-13 20:50:54 +00:00
Scott Ullrich
7c06959209
Remove bad sysctl
...
Pointed-out-by: rsw686 via irc
2006-12-21 20:55:34 +00:00
Scott Ullrich
37f91468f7
Work around a dynamic rule problem that is known in FreeBSD for IPFW2:
...
">Strange, why only me(?) get this problem.. Isn't
>net.inet.ip.fw.dyn_keepalive=1 by default ?
This is a workaround. I am aware about this problem from several people.
Here is needed more testing to determine the cause of the bug."
2006-12-09 20:00:13 +00:00
Scott Ullrich
412611ddd7
Revert last commit. Note website url of reason.
2006-10-01 00:12:50 +00:00
Scott Ullrich
f70f7efe41
Change ip.fastforwarding to ip.forwarding
2006-10-01 00:05:18 +00:00
Scott Ullrich
ed3ccdc74c
Set net.link.tap.user_open to 1 by default.
2006-09-21 19:34:44 +00:00
Scott Ullrich
7ce318d673
Set net.link.bridge.pfil_onlyip=0
2006-09-03 21:32:42 +00:00
Scott Ullrich
4ff6f74dd9
Spell rnd correctly
2006-04-04 18:05:41 +00:00
Scott Ullrich
0d08cea582
Turn off verbosity.
2006-04-03 16:31:01 +00:00
Scott Ullrich
2a0d311d5a
remove net.isr.enable, its no longer an option
2005-10-08 02:31:50 +00:00
Scott Ullrich
c0d86caae8
Let FreeBSD calculate the limit settings
2005-10-04 18:16:17 +00:00
Scott Ullrich
67275810c9
Revert previous commit
2005-08-19 16:46:13 +00:00
Scott Ullrich
382ebc3d04
Update tuning paramaters
2005-08-14 23:26:47 +00:00
Bill Marquette
2bdbc89966
fix typo (must have been asleep randing?) and removed extra sysctl that we already do
2005-03-11 18:32:09 +00:00
Scott Ullrich
df9f94d67b
Add Greg's sysctl suggestions sent to discussion group.
2005-03-11 17:57:01 +00:00
Bill Marquette
471eea2665
Add comments now that we can strip comments :)
2005-02-26 07:07:49 +00:00
Bill Marquette
f1bccb83e1
turn on some of the "security" sysctls
2005-02-25 05:19:24 +00:00
Scott Ullrich
fc2f4559ec
* Add blank sysctl.conf file
2005-02-21 00:44:10 +00:00
Scott Ullrich
461a553f84
remove sysctl.conf
2004-11-22 22:35:47 +00:00
Scott Ullrich
10dcd9ffa9
Turn off SACK since this is most likely causing kernel panics
2004-11-22 17:17:46 +00:00
