# Configuration file for runtime kernel parameters. # See sysctl.conf(5) for more information. # Have the CD-ROM close when you use it, and open when you are done. #dev.cdrom.autoclose = 1 #dev.cdrom.autoeject = 1 # Protection from the SYN flood attack. net.ipv4.tcp_syncookies = 1 # See evil packets in your logs. #net.ipv4.conf.all.log_martians = 1 # Never accept redirects or source routes (these are only useful for routers). #net.ipv4.conf.all.accept_redirects = 0 #net.ipv4.conf.all.accept_source_route = 0 #net.ipv6.conf.all.accept_redirects = 0 #net.ipv6.conf.all.accept_source_route = 0 # Disable packet forwarding. net.ipv4.ip_forward = 0 net.ipv6.conf.all.forwarding = 0 # Tweak the port range used for outgoing connections. #net.ipv4.ip_local_port_range = 32768 61000 # Tweak those values to alter disk syncing and swap behavior. #vm.vfs_cache_pressure = 100 #vm.laptop_mode = 0 #vm.swappiness = 60 # Tweak how the flow of kernel messages is throttled. #kernel.printk_ratelimit_burst = 10 #kernel.printk_ratelimit = 5 # Reboot 600 seconds after kernel panic or oops. #kernel.panic_on_oops = 1 #kernel.panic = 600 # Disable SysRq key to avoid console security issues. kernel.sysrq = 0