|
1
|
# Do not send RSTs for packets to closed ports
|
|
2
|
net.inet.tcp.blackhole=2
|
|
3
|
# Do not send ICMP port unreach messages for closed ports
|
|
4
|
net.inet.udp.blackhole=1
|
|
5
|
# Generate random IP_ID's
|
|
6
|
net.inet.ip.random_id=1
|
|
7
|
# Breaks RFC1379, but nobody uses it anyway
|
|
8
|
net.inet.tcp.drop_synfin=1
|
|
9
|
net.inet.ip.redirect=0
|
|
10
|
net.inet.tcp.syncookies=1
|
|
11
|
net.inet.tcp.recvspace=65228
|
|
12
|
net.inet.tcp.sendspace=65228
|
|
13
|
# fastforwarding - see http://lists.freebsd.org/pipermail/freebsd-net/2004-January/002534.html
|
|
14
|
net.inet.ip.fastforwarding=1
|
|
15
|
net.inet.tcp.delayed_ack=0
|
|
16
|
net.inet.udp.maxdgram=57344
|
|
17
|
kern.rndtest.verbose=0
|
|
18
|
net.link.bridge.pfil_onlyip=0
|
|
19
|
net.link.tap.user_open=1
|