X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=files%2Fetc%2Fsysctl.conf.expect;h=14e08b0c34486e8c29f1c10c7e454a1012fe4bad;hb=94afc1525e7d959747bae5623f438843ab1edae8;hp=9754851030b8daf97b7792da9d69bfbc17dbcdbc;hpb=784c5840807789d23b1b6a0faaaf9d2d530f91e3;p=carnet-upgrade.git

diff --git a/files/etc/sysctl.conf.expect b/files/etc/sysctl.conf.expect
index 9754851..14e08b0 100644
--- a/files/etc/sysctl.conf.expect
+++ b/files/etc/sysctl.conf.expect
@@ -4,10 +4,18 @@
 #
 #kernel.domainname=example.com
 #kernel.printk=4 4 1 7
-#net.ipv4.conf.default.forwarding=1
+#net.ipv4.conf.all.accept_redirects=0
+#net.ipv4.conf.all.accept_source_route=0
+#net.ipv4.conf.all.log_martians=1
+#net.ipv4.conf.all.rp_filter=1
+#net.ipv4.conf.all.send_redirects=0
 #net.ipv4.conf.default.rp_filter=1
 #net.ipv4.icmp_echo_ignore_broadcasts=1
-#net.ipv6.conf.default.forwarding=1
+#net.ipv4.icmp_ignore_bogus_error_responses=1
+#net.ipv4.ip_forward=1
+#net.ipv6.conf.all.accept_redirects=0
+#net.ipv6.conf.all.accept_source_route=0
+#net.ipv6.conf.all.forwarding=1
 kernel.maps_protect=1
 net.core.rmem_default=1048576
 net.core.wmem_default=1048576
@@ -21,10 +29,9 @@ net.ipv4.icmp_echo_ignore_broadcasts=1
 net.ipv4.icmp_ignore_bogus_error_responses=1
 net.ipv4.ip_forward=0
 net.ipv4.ip_local_port_range=10000 65000
-net.ipv4.tcp_congestion_control=cubic
 net.ipv4.tcp_ecn=0
-net.ipv4.tcp_max_syn_backlog=8192
+net.ipv4.tcp_max_syn_backlog=1024
 net.ipv4.tcp_retries1=2
 net.ipv4.tcp_rfc1337=1
-net.ipv4.tcp_syncookies=0
+net.ipv4.tcp_syncookies=1
 vm.mmap_min_addr=65536