✏️ 正在编辑: 10-network-security.conf
路径:
/etc/sysctl.d/10-network-security.conf
提示:
您可以编辑任何文件(包括二进制文件),但请注意不当修改可能导致文件损坏。
# Turn on Source Address Verification in all interfaces to # prevent some spoofing attacks. net.ipv4.conf.default.rp_filter=1 net.ipv4.conf.all.rp_filter=1 # Turn on SYN-flood protections. Starting with 2.6.26, there is no loss # of TCP functionality/features under normal conditions. When flood # protections kick in under high unanswered-SYN load, the system # should remain more stable, with a trade off of some loss of TCP # functionality/features (e.g. TCP Window scaling). net.ipv4.tcp_syncookies=1
💾 保存文件
← 返回文件管理器