46 lines
1.4 KiB
Plaintext
46 lines
1.4 KiB
Plaintext
|
#
|
||
|
|
# Kernel sysctl configuration file
|
||
|
|
#
|
||
|
|
# /etc/sysctl.conf - Configuration file for setting system variables
|
||
|
|
# See sysctl(8) and sysctl.conf (5) for more details.
|
||
|
|
|
||
|
|
# Enable IP packet forwarding between interfaces (act as a firewall, or router)
|
||
|
|
#net.ipv4.ip_forward = 1
|
||
|
|
|
||
|
|
# Disable ICMP redirect messages
|
||
|
|
net.ipv4.conf.all.accept_redirects = 0
|
||
|
|
|
||
|
|
# Do not accept source routing
|
||
|
|
net.ipv4.conf.all.accept_source_route = 0
|
||
|
|
|
||
|
|
# Log packages that have source addresses with no known route ("martians")
|
||
|
|
net.ipv4.conf.all.log_martians = 1
|
||
|
|
|
||
|
|
# Controls source route verification
|
||
|
|
net.ipv4.conf.all.rp_filter = 1
|
||
|
|
|
||
|
|
# Enable ECN (Explicit Congestion Notification) in TCP connections
|
||
|
|
net.ipv4.tcp_ecn = 2
|
||
|
|
|
||
|
|
# Enable syncookies to hosts when the kernels syn backlog queue is overflowed
|
||
|
|
net.ipv4.tcp_syncookies = 1
|
||
|
|
|
||
|
|
# Ignore ICMP messages sent to broadcast or multicast addresses
|
||
|
|
net.ipv4.icmp_echo_ignore_broadcasts = 1
|
||
|
|
|
||
|
|
# Do not log bogus responses to broadcast frames send by hosts that ignore RFC 1122
|
||
|
|
#net.ipv4.icmp_ignore_bogus_error_responses = 1
|
||
|
|
|
||
|
|
# Ensure TCP window scaling is enabled
|
||
|
|
net.ipv4.tcp_window_scaling = 1
|
||
|
|
|
||
|
|
# Controls the System Request debugging functionality of the kernel
|
||
|
|
# kernel.sysrq = 0
|
||
|
|
|
||
|
|
# Controls whether core dumps will append the PID to the core filename.
|
||
|
|
# Useful for debugging multi-threaded applications.
|
||
|
|
kernel.core_uses_pid = 1
|
||
|
|
|
||
|
|
# Increment default user inotify watches limit
|
||
|
|
fs.inotify.max_user_watches=524288
|