root@EviL etc # cat sysctl.conf
# $FreeBSD: src/etc/sysctl.conf,v 1.8 2003/03/13 18:43:50 mux Exp $
#
#  This file is read when going to multi-user and its contents piped thru
#  ``sysctl'' to adjust kernel values.  ``man 5 sysctl.conf'' for details.
#

# Uncomment this to prevent users from seeing information about processes that
# are being run under another UID.
security.bsd.see_other_uids=0
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.local.dgram.maxdgram=57344
net.local.dgram.recvspace=65536 # 65536
net.local.stream.recvspace=65536
net.local.stream.sendspace=65536

net.inet.ip.fw.dyn_buckets=256
net.inet.ip.intr_queue_maxlen=300
net.inet.ip.fw.debug=0
net.inet.ip.rtexpire=2
net.inet.ip.rtminexpire=2
net.inet.ip.rtmaxcache=256 # syn protection all 3 rt
net.inet.ip.forwarding=1
net.inet.ip.redirect=0
net.inet.ip.sourceroute=0
net.inet.ip.accept_sourceroute=0
net.inet.ip.fw.dyn_fin_lifetime=1
net.inet.ip.fw.dyn_rst_lifetime=1
net.inet.ip.fw.dyn_syn_lifetime=5
net.inet.ip.fw.dyn_udp_lifetime=2 # default 10
net.inet.ip.fw.dyn_ack_lifetime=60
net.inet.ip.fw.dyn_max=8192
net.inet.ip.fw.one_pass=0
net.inet.ip.random_id=1
net.inet.ip.fw.verbose_limit=2500

net.inet.tcp.newreno=0 # default 1
net.inet.tcp.sendspace=32120
net.inet.tcp.recvspace=64240
net.inet.tcp.syncookies=1
net.inet.tcp.inflight.enable=0
net.inet.tcp.keepintvl=60000 # 75000
net.inet.tcp.keepidle=300000 # 7200000
net.inet.tcp.keepinit=10000 # 75000 syn protection
net.inet.tcp.delayed_ack=1 = default 0
net.inet.tcp.icmp_may_rst=0
net.inet.tcp.sack.enable=0 #default 1
net.inet.tcp.blackhole=2
net.inet.tcp.msl=7500
net.inet.tcp.rfc3042=1
net.inet.tcp.rfc3390=0
net.inet.tcp.path_mtu_discovery=0
#net.inet.tcp.rexmit_slope=200 # default 200
net.inet.tcp.log_in_vain=1
net.inet.tcp.rfc1323=0

net.inet.udp.log_in_vain=1
net.inet.udp.blackhole=1
net.inet.udp.maxdgram=57344
net.inet.udp.recvspace=65536

net.inet.icmp.icmplim=30
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1

net.inet.raw.maxdgram=57344
net.inet.raw.recvspace=65536 # 65536

#kern.ipc.nmbclusters=65536

kern.maxprocperuid=200
kern.maxfiles=65536
kern.maxfilesperproc=4096