From 097a9d6bae16257ca039fa6a77f1c9a2b8adbc26 Mon Sep 17 00:00:00 2001 From: des Date: Mon, 19 Mar 2001 22:07:32 +0000 Subject: Axe TCP_RESTRICT_RST. It was never a particularly good idea except for a few very specific scenarios, and now that we have had net.inet.tcp.blackhole for quite some time there is really no reason to use it any more. (second of three commits) --- etc/defaults/rc.conf | 1 - 1 file changed, 1 deletion(-) (limited to 'etc/defaults/rc.conf') diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf index d05dc77..27e274f 100644 --- a/etc/defaults/rc.conf +++ b/etc/defaults/rc.conf @@ -79,7 +79,6 @@ tcp_keepalive="YES" # Enable stale TCP connection timeout (or NO). # TCP_RESTRICT_RST set in your kernel. Please refer to LINT for details. tcp_drop_synfin="NO" # Set to YES to drop TCP packets with SYN+FIN # NOTE: this violates the TCP specification -tcp_restrict_rst="NO" # Set to YES to restrict emission of RST icmp_drop_redirect="NO" # Set to YES to ignore ICMP REDIRECT packets icmp_log_redirect="NO" # Set to YES to log ICMP REDIRECT packets network_interfaces="auto" # List of network interfaces (or "auto"). -- cgit v1.1