Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 11 Aug 2024 09:47:28 -0400
From:      Michael Sierchio <kudzu@tenebras.com>
To:        void <void@f-m.fm>
Cc:        freebsd-net@freebsd.org
Subject:   Re: drop synfin
Message-ID:  <CAHu1Y71GY3_wWDCL9G-iDzhBwJPy7MEVFTZz4i0oceEnE5x%2Bdg@mail.gmail.com>
In-Reply-To: <Zri7fNZMIwwjWQbM@int21h>
References:  <Zri7fNZMIwwjWQbM@int21h>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
sysrc is for editing rc files, and that's not what you want to do.

you may manually set the MIB with sysctl net.inet.tcp.drop_synfin=1 or you
can put this line in /etc/sysctl.conf

net.inet.tcp.drop_synfin=1

On Sun, Aug 11, 2024 at 9:24 AM void <void@f-m.fm> wrote:

> (originally posted to hackers@ but on second thoughts this ML is
> more relevant)
>
> Hi,
>
> Is it sufficient to
>
> EITHER
>
> 1. # sysctl net.inet.tcp.drop_synfin=1
>
> OR
>
> 2. # sysrc tcp_drop_synfin=YES
>
> or
>
> 3. must one do both ?
>
> --
>
>

[-- Attachment #2 --]
<div dir="ltr">sysrc is for editing rc files, and that&#39;s not what you want to do.<div><br></div><div>you may manually set the MIB with <font face="monospace">sysctl net.inet.tcp.drop_synfin=1</font> or you can put this line in /etc/sysctl.conf<br><br>





<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:&quot;Roboto Mono&quot;;color:rgb(26,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">net.inet.tcp.drop_synfin=1</span></p></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Aug 11, 2024 at 9:24 AM void &lt;<a href="mailto:void@f-m.fm">void@f-m.fm</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">(originally posted to hackers@ but on second thoughts this ML is<br>
more relevant)<br>
<br>
Hi,<br>
<br>
Is it sufficient to<br>
<br>
EITHER<br>
<br>
1. # sysctl net.inet.tcp.drop_synfin=1<br>
<br>
OR<br>
<br>
2. # sysrc tcp_drop_synfin=YES<br>
<br>
or<br>
<br>
3. must one do both ?<br>
<br>
-- <br>
<br>
</blockquote></div>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHu1Y71GY3_wWDCL9G-iDzhBwJPy7MEVFTZz4i0oceEnE5x%2Bdg>