Commit Graph

13 Commits

Author SHA1 Message Date
Michael Tremer
32c6ebdced firewall: Make ICMP ratelimiting a bit saner again. 2014-03-05 12:31:36 +01:00
Michael Tremer
fa8229546b firewall: Extend rate limiting for ICMP error messages.
Fixes #10489.
2014-03-04 14:14:54 +01:00
Michael Tremer
1108a15cc6 Move enabling nf_conntrack_acct where it should be. 2014-02-14 12:52:28 +01:00
Michael Tremer
a30c7aa3be Compile-in IPv6 kernel module and disable all IPv6.
It comes much more handy to compile in the IPv6 kernel module
(because it is loading almost everywhere) and disable the IPv6
functionality when the system starts up.

Therefore, IPv6 is not accidentially enabled at any time unless
someone wants to use it and disables the systcl options.
2012-11-24 14:52:32 +01:00
Arne Fitzenreiter
fa5b71bf28 Revert "sysctl: activate conntrack accounting."
This reverts commit 94ca39b479.
Cannot set this because nf_conntrack is not loaded yet.
2012-11-17 20:04:53 +01:00
Arne Fitzenreiter
94ca39b479 sysctl: activate conntrack accounting. 2012-11-17 15:39:54 +01:00
Arne Fitzenreiter
d1605d0810 sysctl.conf: reserve 8MB free memory.
Some driver like SMSC9500 need some free memory for network packet
recieve and produce kernel faults if this memory cant allocated fast
enough.
2012-06-26 15:19:36 +02:00
Michael Tremer
ed37f707f9 Remove old settings from sysctl.conf.
This commits removes some settings from /etc/sysctl.conf that have
been there forever with no particular reason.
They could improve performance on internet connections, especially
on lines with massive packet lost.
2011-06-25 22:02:08 +02:00
Arne Fitzenreiter
dc931fbac7 Set vm.mmap_min_addr to 4096 to block a security problem. 2009-11-04 18:48:38 +01:00
maniacikarus
4894d87017 Just a lot of things changed for squid 2009-02-07 14:41:28 +01:00
maniacikarus
8b88498602 Started core27 modified max Open Files per process 2009-02-07 08:59:44 +01:00
Maniacikarus
832eec2359 Change system behaviour to less swapping 2008-12-07 18:49:27 +01:00
ipfire
cd1a292722 git-svn-id: http://svn.ipfire.org/svn/ipfire/IPFire/source@16 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8 2006-02-15 21:15:54 +00:00