| 1 |
471eea26
|
Bill Marquette
|
# Do not send RSTs for packets to closed ports
|
| 2 |
f1bccb83
|
Bill Marquette
|
net.inet.tcp.blackhole=2
|
| 3 |
471eea26
|
Bill Marquette
|
# Do not send ICMP port unreach messages for closed ports
|
| 4 |
f1bccb83
|
Bill Marquette
|
net.inet.udp.blackhole=1
|
| 5 |
2bdbc899
|
Bill Marquette
|
# Generate random IP_ID's
|
| 6 |
f1bccb83
|
Bill Marquette
|
net.inet.ip.random_id=1
|
| 7 |
471eea26
|
Bill Marquette
|
# Breaks RFC1379, but nobody uses it anyway
|
| 8 |
f1bccb83
|
Bill Marquette
|
net.inet.tcp.drop_synfin=1
|
| 9 |
df9f94d6
|
Scott Ullrich
|
net.inet.ip.redirect=0
|
| 10 |
|
|
net.inet.tcp.syncookies=1
|
| 11 |
67275810
|
Scott Ullrich
|
net.inet.tcp.recvspace=65228
|
| 12 |
|
|
net.inet.tcp.sendspace=65228
|
| 13 |
df9f94d6
|
Scott Ullrich
|
net.inet.ip.fastforwarding=1
|
| 14 |
|
|
net.inet.tcp.delayed_ack=0
|
| 15 |
c0d86caa
|
Scott Ullrich
|
#kern.ipc.maxsockbuf=2097152
|
| 16 |
|
|
#kern.ipc.somaxconn=2048
|
| 17 |
|
|
#kern.maxfiles=16384
|
| 18 |
|
|
#kern.maxfilesperproc=16384
|
| 19 |
df9f94d6
|
Scott Ullrich
|
net.inet.udp.maxdgram=57344
|
| 20 |
4ff6f74d
|
Scott Ullrich
|
kern.rndtest.verbose=0
|