firewall: Enable ECN fallback mechanism when ECN is enabled

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/functions/functions.firewall b/src/functions/functions.firewall
index 58a2aa4e03bb6613edf8ffe81d17d6747746bbea..347916ef63121647767a597abf15af6fc022cb14 100644 (file)
--- a/src/functions/functions.firewall
+++ b/src/functions/functions.firewall
@@ -120,6 +120,7 @@ firewall_kernel_init() {
        if enabled FIREWALL_USE_ECN; then
                log INFO "Enabling ECN (Explicit Congestion Notification)"
                sysctl_set "net.ipv4.tcp_ecn" 1
+               sysctl_set "net.ipv4.tcp_ecn_fallback" 1
        else
                log INFO "Disabling ECN (Explicit Congestion Notification)"
                sysctl_set "net.ipv4.tcp_ecn" 2