]>
Commit | Line | Data |
---|---|---|
1 | net.ipv4.ip_forward = 1 | |
2 | net.ipv4.ip_dynaddr = 1 | |
3 | net.ipv4.icmp_echo_ignore_broadcasts = 1 | |
4 | net.ipv4.icmp_ignore_bogus_error_responses = 1 | |
5 | ||
6 | net.ipv4.tcp_syncookies = 1 | |
7 | net.ipv4.tcp_fin_timeout = 30 | |
8 | net.ipv4.tcp_syn_retries = 3 | |
9 | net.ipv4.tcp_synack_retries = 3 | |
10 | ||
11 | net.ipv4.conf.default.arp_filter = 1 | |
12 | net.ipv4.conf.default.rp_filter = 0 | |
13 | net.ipv4.conf.default.accept_redirects = 0 | |
14 | net.ipv4.conf.default.accept_source_route = 0 | |
15 | net.ipv4.conf.default.log_martians = 1 | |
16 | ||
17 | net.ipv4.conf.all.arp_filter = 1 | |
18 | net.ipv4.conf.all.rp_filter = 0 | |
19 | net.ipv4.conf.all.accept_redirects = 0 | |
20 | net.ipv4.conf.all.accept_source_route = 0 | |
21 | net.ipv4.conf.all.log_martians = 1 | |
22 | ||
23 | kernel.printk = 1 4 1 7 | |
24 | vm.swappiness=0 | |
25 | vm.mmap_min_addr = 4096 | |
26 | vm.min_free_kbytes = 8192 | |
27 | ||
28 | # Disable IPv6 by default. | |
29 | net.ipv6.conf.all.disable_ipv6 = 1 | |
30 | net.ipv6.conf.default.disable_ipv6 = 1 | |
31 | ||
32 | # Enable netfilter accounting | |
33 | net.netfilter.nf_conntrack_acct=1 |