From ab0dcb28fb662c8a5dfbbd1d0726c94e78164882 Mon Sep 17 00:00:00 2001 From: Eric Naim Date: Wed, 27 Nov 2024 00:09:11 +0800 Subject: [PATCH] sysctl: Remove net.ipv4.tcp_syncookies This is the default value. No reason to enforce a default, especially if its in a package where it can be overrided anyway from /etc or from cmdline. Signed-off-by: Eric Naim --- usr/lib/sysctl.d/99-cachyos-settings.conf | 4 ---- 1 file changed, 4 deletions(-) diff --git a/usr/lib/sysctl.d/99-cachyos-settings.conf b/usr/lib/sysctl.d/99-cachyos-settings.conf index 28076c8..39a6e94 100644 --- a/usr/lib/sysctl.d/99-cachyos-settings.conf +++ b/usr/lib/sysctl.d/99-cachyos-settings.conf @@ -49,10 +49,6 @@ kernel.kexec_load_disabled = 1 # Using the value 3 instead of the default 1 allows TCP Fast Open for both incoming and outgoing connections: net.ipv4.tcp_fastopen = 3 -# TCP SYN cookie protection -# Helps protect against SYN flood attacks. Only kicks in when net.ipv4.tcp_max_syn_backlog is reached: -net.ipv4.tcp_syncookies = 1 - # TCP Enable ECN Negotiation by default net.ipv4.tcp_ecn = 1