[2013-04-01 21:19:43 +0200] Tom Gundersen:
> 3) net.ipv4.tcp_syncookies
> 
> We enable this. Are we sure this is the right thing to do by default?
> There appears to be lots of warnings about it.

It's enabled by default nowadays anyhow.

> 4) net.ipv6.conf.all.forwarding
> 
> We disable this. It appears to be disabled by default, or am I reading it 
> wrong?

Correct.

> Are we happy with that?

That makes a lot of sense to me and I will be happy to remove
sysctl.conf from our procps-ng package unless there are objections.

Cheers.

-- 
Gaetan

Reply via email to