|
1
|
<sysctl>
|
|
2
|
<item>
|
|
3
|
<tunable>net.inet.tcp.blackhole</tunable>
|
|
4
|
<value>default</value>
|
|
5
|
<descr><![CDATA[Drop packets to closed TCP ports without returning a RST]]></descr>
|
|
6
|
</item>
|
|
7
|
<item>
|
|
8
|
<tunable>net.inet.udp.blackhole</tunable>
|
|
9
|
<value>default</value>
|
|
10
|
<descr><![CDATA[Do not send ICMP port unreachable messages for closed UDP ports]]></descr>
|
|
11
|
</item>
|
|
12
|
<item>
|
|
13
|
<tunable>net.inet.ip.random_id</tunable>
|
|
14
|
<value>default</value>
|
|
15
|
<descr><![CDATA[Randomize the ID field in IP packets (default is 0: sequential IP IDs)]]></descr>
|
|
16
|
</item>
|
|
17
|
<item>
|
|
18
|
<tunable>net.inet.tcp.drop_synfin</tunable>
|
|
19
|
<value>default</value>
|
|
20
|
<descr><![CDATA[Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)]]></descr>
|
|
21
|
</item>
|
|
22
|
<item>
|
|
23
|
<tunable>net.inet.ip.redirect</tunable>
|
|
24
|
<value>default</value>
|
|
25
|
<descr><![CDATA[Sending of IPv4 ICMP redirects]]></descr>
|
|
26
|
</item>
|
|
27
|
<item>
|
|
28
|
<tunable>net.inet6.ip6.redirect</tunable>
|
|
29
|
<value>default</value>
|
|
30
|
<descr><![CDATA[Sending of IPv6 ICMP redirects]]></descr>
|
|
31
|
</item>
|
|
32
|
<item>
|
|
33
|
<tunable>net.inet.tcp.syncookies</tunable>
|
|
34
|
<value>default</value>
|
|
35
|
<descr><![CDATA[Generate SYN cookies for outbound SYN-ACK packets]]></descr>
|
|
36
|
</item>
|
|
37
|
<item>
|
|
38
|
<tunable>net.inet.tcp.recvspace</tunable>
|
|
39
|
<value>default</value>
|
|
40
|
<descr><![CDATA[Maximum incoming TCP datagram size]]></descr>
|
|
41
|
</item>
|
|
42
|
<item>
|
|
43
|
<tunable>net.inet.tcp.sendspace</tunable>
|
|
44
|
<value>default</value>
|
|
45
|
<descr><![CDATA[Maximum outgoing TCP datagram size]]></descr>
|
|
46
|
</item>
|
|
47
|
<item>
|
|
48
|
<tunable>net.inet.ip.fastforwarding</tunable>
|
|
49
|
<value>default</value>
|
|
50
|
<descr><![CDATA[Fastforwarding (see http://lists.freebsd.org/pipermail/freebsd-net/2004-January/002534.html)]]></descr>
|
|
51
|
</item>
|
|
52
|
<item>
|
|
53
|
<tunable>net.inet.tcp.delayed_ack</tunable>
|
|
54
|
<value>default</value>
|
|
55
|
<descr><![CDATA[Do not delay ACK to try and piggyback it onto a data packet]]></descr>
|
|
56
|
</item>
|
|
57
|
<item>
|
|
58
|
<tunable>net.inet.udp.maxdgram</tunable>
|
|
59
|
<value>default</value>
|
|
60
|
<descr><![CDATA[Maximum outgoing UDP datagram size]]></descr>
|
|
61
|
</item>
|
|
62
|
<item>
|
|
63
|
<tunable>net.link.bridge.pfil_onlyip</tunable>
|
|
64
|
<value>default</value>
|
|
65
|
<descr><![CDATA[Handling of non-IP packets which are not passed to pfil (see if_bridge(4))]]></descr>
|
|
66
|
</item>
|
|
67
|
<item>
|
|
68
|
<tunable>net.link.tap.user_open</tunable>
|
|
69
|
<value>default</value>
|
|
70
|
<descr><![CDATA[Allow unprivileged access to tap(4) device nodes]]></descr>
|
|
71
|
</item>
|
|
72
|
<item>
|
|
73
|
<tunable>kern.rndtest.verbose</tunable>
|
|
74
|
<value>default</value>
|
|
75
|
<descr><![CDATA[Verbosity of the rndtest driver (0: do not display results on console)]]></descr>
|
|
76
|
</item>
|
|
77
|
<item>
|
|
78
|
<tunable>kern.randompid</tunable>
|
|
79
|
<value>default</value>
|
|
80
|
<descr><![CDATA[Randomize PIDs (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())]]></descr>
|
|
81
|
</item>
|
|
82
|
<item>
|
|
83
|
<tunable>net.inet.tcp.inflight.enable</tunable>
|
|
84
|
<value>default</value>
|
|
85
|
<descr><![CDATA[The system will attempt to calculate the bandwidth delay product for each connection and limit the amount of data queued to the network to just the amount required to maintain optimum throughput. ]]></descr>
|
|
86
|
</item>
|
|
87
|
<item>
|
|
88
|
<tunable>net.inet.icmp.icmplim</tunable>
|
|
89
|
<value>default</value>
|
|
90
|
<descr><![CDATA[Set ICMP Limits]]></descr>
|
|
91
|
</item>
|
|
92
|
<item>
|
|
93
|
<tunable>net.inet.tcp.tso</tunable>
|
|
94
|
<value>default</value>
|
|
95
|
<descr><![CDATA[TCP Offload engine]]></descr>
|
|
96
|
</item>
|
|
97
|
<item>
|
|
98
|
<tunable>hw.bce.tso_enable</tunable>
|
|
99
|
<value>default</value>
|
|
100
|
<descr><![CDATA[TCP Offload engine - BCE]]></descr>
|
|
101
|
</item>
|
|
102
|
<item>
|
|
103
|
<tunable>net.inet.ip.portrange.first</tunable>
|
|
104
|
<value>default</value>
|
|
105
|
<descr><![CDATA[Set the ephemeral port range starting port]]></descr>
|
|
106
|
</item>
|
|
107
|
<item>
|
|
108
|
<tunable>hw.syscons.kbd_reboot </tunable>
|
|
109
|
<value>default</value>
|
|
110
|
<descr><![CDATA[Enables ctrl+alt+delete]]></descr>
|
|
111
|
</item>
|
|
112
|
<item>
|
|
113
|
<tunable>net.link.bridge.pfil_member</tunable>
|
|
114
|
<value>1</value>
|
|
115
|
<descr><![CDATA[Set to 0 to disable filtering on the incoming and outgoing member interfaces.]]></descr>
|
|
116
|
</item>
|
|
117
|
<item>
|
|
118
|
<tunable>net.link.bridge.pfil_bridge</tunable>
|
|
119
|
<value>0</value>
|
|
120
|
<descr><![CDATA[Set to 1 to enable filtering on the bridge interface]]></descr>
|
|
121
|
</item>
|
|
122
|
<item>
|
|
123
|
<tunable>hw.ath.bstuck</tunable>
|
|
124
|
<value>12</value>
|
|
125
|
<descr><![CDATA[hw.ath.bstuck]]></descr>
|
|
126
|
</item>
|
|
127
|
<item>
|
|
128
|
<tunable>hw.ath.longcal</tunable>
|
|
129
|
<value>30</value>
|
|
130
|
<descr><![CDATA[hw.ath.longcal]]></descr>
|
|
131
|
</item>
|
|
132
|
<item>
|
|
133
|
<tunable>hw.usb.no_shutdown_wait</tunable>
|
|
134
|
<value>1</value>
|
|
135
|
<descr/>
|
|
136
|
</item>
|
|
137
|
</sysctl>
|
|
138
|
|