dserver@Y04S12:~$ cat /etc/sysctl.conf # # /etc/sysctl.conf - Configuration file for setting system variables # See sysctl.conf (5) for information. # #kernel.domainname = example.com #net/ipv4/icmp_echo_ignore_broadcasts=1 # Uncomment the following to stop low-level messages on console #kernel.printk = 4 4 1 7 ##############################################################3 # Functions previously found in netbase # # Uncomment the next two lines to enable Spoof protection (reverse-path filter) #net.ipv4.conf.default.rp_filter=1 #net.ipv4.conf.all.rp_filter=1 # Uncomment the next line to enable TCP/IP SYN cookies #net.ipv4.tcp_syncookies=1 # Uncomment the next line to enable packet forwarding for IPv4 #net.ipv4.conf.default.forwarding=1 # Uncomment the next line to enable packet forwarding for IPv6 #net.ipv6.conf.default.forwarding=1 # My custom shit net.core.rmem_max = 8388608 net.ipv4.tcp_rmem = 4096 1048576 8388608 net.core.wmem_max = 8388608 net.ipv4.tcp_wmem = 4096 1048576 8388608 net.ipv4.tcp_mem = 8388608 8388608 8388608 net.core.optmem_max = 40960 # tcp-time-wait buckets pool size from # net.ipv4.tcp_max_tw_buckets = 180000 # to 360000 net.ipv4.tcp_max_tw_buckets=360000 # Increase the maximum number of skb-heads to be cached from 128 net.core.hot_list_length=256 # increase from 300 to 1024 net.core.netdev_max_backlog=1024 #increase TCP Re-Ordering value in kernel from 3 to 5 net.ipv4.tcp_reordering=5 # change from 0 to 1 to Enable ignoring broadcasts request net.ipv4.icmp_echo_ignore_broadcasts=1 # change from 0 to 1 to enable syn cookies protection net.ipv4.tcp_syncookies=1 # turn on TCP time stamps net.ipv4.tcp_timestamps=1 # change from 0 to 1 (fack was enabled already) net.ipv4.tcp_sack=1 # change from 0 to 1 for TCP window scaling net.ipv4.tcp_window_scaling=1 # decrease from 1400 to 1200 for tcp_keepalive_time connection net.ipv4.tcp_keepalive_time=1200 # decrease from 1400 to 25 net.ipv4.tcp_fin_timeout=25 # change from 0 to 1 to Log Spoofed Packets, Source Routed Packets, Redirect Packets net.ipv4.conf.default.log_martians=1 net.ipv4.conf.all.log_martians=1 #disable ICMP redirects net.ipv4.conf.default.accept_redirects=0 net.ipv4.conf.all.accept_redirects=0 # disable IP source routing net.ipv4.conf.default.accept_source_route=0 net.ipv4.conf.all.accept_source_route=0 # enable source route verification net.ipv4.conf.all.rp_filter=1 net.ipv4.conf.default.rp_filter=1