diff --git a/usr/lib/sysctl.d/40-openmamba.conf b/usr/lib/sysctl.d/40-openmamba.conf index ab015d5..c20ddc1 100644 --- a/usr/lib/sysctl.d/40-openmamba.conf +++ b/usr/lib/sysctl.d/40-openmamba.conf @@ -20,7 +20,7 @@ net.ipv4.conf.all.log_martians = 1 net.ipv4.conf.all.rp_filter = 1 # Enable ECN (Explicit Congestion Notification) in TCP connections -net.ipv4.tcp_ecn = 0 +net.ipv4.tcp_ecn = 2 # Enable syncookies to hosts when the kernels syn backlog queue is overflowed net.ipv4.tcp_syncookies = 1 @@ -31,6 +31,9 @@ net.ipv4.icmp_echo_ignore_broadcasts = 1 # Do not log bogus responses to broadcast frames send by hosts that ignore RFC 1122 #net.ipv4.icmp_ignore_bogus_error_responses = 1 +# Ensure TCP window scaling is enabled +net.ipv4.tcp_window_scaling = 1 + # Controls the System Request debugging functionality of the kernel # kernel.sysrq = 0 @@ -38,7 +41,5 @@ net.ipv4.icmp_echo_ignore_broadcasts = 1 # Useful for debugging multi-threaded applications. kernel.core_uses_pid = 1 -net.ipv4.tcp_window_scaling = 0 - # Increment default user inotify watches limit fs.inotify.max_user_watches=524288