From d7a8bf5ea4484d33b42f150eaf2fa4ffc9adea74 Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 1 Mar 2018 15:21:13 +0000
Subject: [PATCH] firewall: Enable ECN by default

Apple has tried this and it seems to be safe now

https://www.ietf.org/proceedings/98/slides/slides-98-maprg-tcp-ecn-experience-with-enabling-ecn-on-the-internet-padma-bhooma-00.pdf

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 man/firewall-settings.xml                  | 2 +-
 src/functions/functions.constants-firewall | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/man/firewall-settings.xml b/man/firewall-settings.xml
index 6870d1f..6062636 100644
--- a/man/firewall-settings.xml
+++ b/man/firewall-settings.xml
@@ -254,7 +254,7 @@
 
 			<varlistentry>
 				<term>
-					<varname>FIREWALL_USE_ECN</varname> = [true|<emphasis>false</emphasis>]
+					<varname>FIREWALL_USE_ECN</varname> = [<emphasis>true</emphasis>|false]
 				</term>
 
 				<listitem>
diff --git a/src/functions/functions.constants-firewall b/src/functions/functions.constants-firewall
index f1eaf50..d42189a 100644
--- a/src/functions/functions.constants-firewall
+++ b/src/functions/functions.constants-firewall
@@ -74,7 +74,7 @@ FIREWALL_ACCEPT_ICMP_REDIRECTS="false"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_ACCEPT_ICMP_REDIRECTS"
 
 # ECN (Explicit Congestion Notification)
-FIREWALL_USE_ECN="false"
+FIREWALL_USE_ECN="true"
 FIREWALL_CONFIG_PARAMS="${FIREWALL_CONFIG_PARAMS} FIREWALL_USE_ECN"
 
 # Path MTU discovery
-- 
2.47.3