mirror of
https://github.com/pfsense/pfsense.git
synced 2025-10-26 11:38:35 +00:00
20 lines
570 B
Plaintext
20 lines
570 B
Plaintext
# Do not send RSTs for packets to closed ports
|
|
net.inet.tcp.blackhole=2
|
|
# Do not send ICMP port unreach messages for closed ports
|
|
net.inet.udp.blackhole=1
|
|
# Generate random IP_ID's
|
|
net.inet.ip.random_id=1
|
|
# Breaks RFC1379, but nobody uses it anyway
|
|
net.inet.tcp.drop_synfin=1
|
|
net.inet.ip.redirect=0
|
|
net.inet.tcp.syncookies=1
|
|
net.inet.tcp.recvspace=65228
|
|
net.inet.tcp.sendspace=65228
|
|
net.inet.ip.fastforwarding=1
|
|
net.inet.tcp.delayed_ack=0
|
|
#kern.ipc.maxsockbuf=2097152
|
|
#kern.ipc.somaxconn=2048
|
|
#kern.maxfiles=16384
|
|
#kern.maxfilesperproc=16384
|
|
net.inet.udp.maxdgram=57344
|