X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?p=carnet-upgrade.git;a=blobdiff_plain;f=files%2Fetc%2Fsysctl.conf.expect;h=14e08b0c34486e8c29f1c10c7e454a1012fe4bad;hp=179b791ee739a3815c3519427b5ac65d6fbdd547;hb=94afc1525e7d959747bae5623f438843ab1edae8;hpb=c7223f08dfea9a852f23237a6d64dab94283d5e3

diff --git a/files/etc/sysctl.conf.expect b/files/etc/sysctl.conf.expect
index 179b791..14e08b0 100644
--- a/files/etc/sysctl.conf.expect
+++ b/files/etc/sysctl.conf.expect
@@ -4,11 +4,18 @@
 #
 #kernel.domainname=example.com
 #kernel.printk=4 4 1 7
-#net.ipv4.conf.default.forwarding=1
+#net.ipv4.conf.all.accept_redirects=0
+#net.ipv4.conf.all.accept_source_route=0
+#net.ipv4.conf.all.log_martians=1
+#net.ipv4.conf.all.rp_filter=1
+#net.ipv4.conf.all.send_redirects=0
 #net.ipv4.conf.default.rp_filter=1
 #net.ipv4.icmp_echo_ignore_broadcasts=1
-#net.ipv6.conf.default.forwarding=1
-kernel.exec-shield=3
+#net.ipv4.icmp_ignore_bogus_error_responses=1
+#net.ipv4.ip_forward=1
+#net.ipv6.conf.all.accept_redirects=0
+#net.ipv6.conf.all.accept_source_route=0
+#net.ipv6.conf.all.forwarding=1
 kernel.maps_protect=1
 net.core.rmem_default=1048576
 net.core.wmem_default=1048576
@@ -22,9 +29,8 @@ net.ipv4.icmp_echo_ignore_broadcasts=1
 net.ipv4.icmp_ignore_bogus_error_responses=1
 net.ipv4.ip_forward=0
 net.ipv4.ip_local_port_range=10000 65000
-net.ipv4.tcp_congestion_control=cubic
 net.ipv4.tcp_ecn=0
-net.ipv4.tcp_max_syn_backlog=8192
+net.ipv4.tcp_max_syn_backlog=1024
 net.ipv4.tcp_retries1=2
 net.ipv4.tcp_rfc1337=1
 net.ipv4.tcp_syncookies=1