From 15864861753ef1cc35f73af738ddb776571b74e5 Mon Sep 17 00:00:00 2001 From: jim-p Date: Tue, 19 Oct 2010 12:00:09 -0400 Subject: Change the description field on sysctl tunables to be 'descr' and not 'desc' so they will gain CDATA protection. Ticket #320 --- conf.default/config.xml | 52 ++++++++++++++++++++++++------------------------- 1 file changed, 26 insertions(+), 26 deletions(-) (limited to 'conf.default/config.xml') diff --git a/conf.default/config.xml b/conf.default/config.xml index 5c61aa7..00e7992 100644 --- a/conf.default/config.xml +++ b/conf.default/config.xml @@ -6,132 +6,132 @@ pfsense_ng - Set the ephemeral port range to be lower. + Set the ephemeral port range to be lower. net.inet.ip.portrange.first default - Drop packets to closed TCP ports without returning a RST + Drop packets to closed TCP ports without returning a RST net.inet.tcp.blackhole default - Do not send ICMP port unreachable messages for closed UDP ports + Do not send ICMP port unreachable messages for closed UDP ports net.inet.udp.blackhole default - Randomize the ID field in IP packets (default is 0: sequential IP IDs) + Randomize the ID field in IP packets (default is 0: sequential IP IDs) net.inet.ip.random_id default - Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway) + Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway) net.inet.tcp.drop_synfin default - Enable sending IPv4 redirects + Enable sending IPv4 redirects net.inet.ip.redirect default - Enable sending IPv6 redirects + Enable sending IPv6 redirects net.inet6.ip6.redirect default - Generate SYN cookies for outbound SYN-ACK packets + Generate SYN cookies for outbound SYN-ACK packets net.inet.tcp.syncookies default - Maximum incoming/outgoing TCP datagram size (receive) + Maximum incoming/outgoing TCP datagram size (receive) net.inet.tcp.recvspace default - Maximum incoming/outgoing TCP datagram size (send) + Maximum incoming/outgoing TCP datagram size (send) net.inet.tcp.sendspace default - IP Fastforwarding + IP Fastforwarding net.inet.ip.fastforwarding default - Do not delay ACK to try and piggyback it onto a data packet + Do not delay ACK to try and piggyback it onto a data packet net.inet.tcp.delayed_ack default - Maximum outgoing UDP datagram size + Maximum outgoing UDP datagram size net.inet.udp.maxdgram default - Handling of non-IP packets which are not passed to pfil (see if_bridge(4)) + Handling of non-IP packets which are not passed to pfil (see if_bridge(4)) net.link.bridge.pfil_onlyip default - Set to 0 to disable filtering on the incoming and outgoing member interfaces. + Set to 0 to disable filtering on the incoming and outgoing member interfaces. net.link.bridge.pfil_member default - Set to 1 to enable filtering on the bridge interface + Set to 1 to enable filtering on the bridge interface net.link.bridge.pfil_bridge default - Allow unprivileged access to tap(4) device nodes + Allow unprivileged access to tap(4) device nodes net.link.tap.user_open default - Verbosity of the rndtest driver (0: do not display results on console) + Verbosity of the rndtest driver (0: do not display results on console) kern.rndtest.verbose default - Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid()) + Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid()) kern.randompid default - Maximum size of the IP input queue + Maximum size of the IP input queue net.inet.ip.intr_queue_maxlen default - Disable CTRL+ALT+Delete reboot from keyboard. + Disable CTRL+ALT+Delete reboot from keyboard. hw.syscons.kbd_reboot default - Enable TCP Inflight mode + Enable TCP Inflight mode net.inet.tcp.inflight.enable default - Enable TCP extended debugging + Enable TCP extended debugging net.inet.tcp.log_debug default - Set ICMP Limits + Set ICMP Limits net.inet.icmp.icmplim default - TCP Offload Engine + TCP Offload Engine net.inet.tcp.tso default - TCP Offload Engine - BCE + TCP Offload Engine - BCE hw.bce.tso_enable default -- cgit v1.1