very rarely if ever needed any more. we should not trick people into thinking they are impoving sth doing so, it's rather the opposite these days.
Index: etc/sysctl.conf =================================================================== RCS file: /cvs/src/etc/sysctl.conf,v retrieving revision 1.54 diff -u -p -r1.54 sysctl.conf --- etc/sysctl.conf 20 Sep 2012 12:51:43 -0000 1.54 +++ etc/sysctl.conf 19 Apr 2014 16:18:38 -0000 @@ -15,8 +15,6 @@ #net.inet6.ip6.accept_rtadv=1 # 1=Permit IPv6 autoconf (forwarding must be 0) #net.inet.tcp.always_keepalive=1 # 1=Keepalives for all connections (e.g. hotel/airport NAT) #net.inet.tcp.keepidle=100 # 100=send TCP keepalives every 50 seconds -#net.inet.tcp.rfc1323=0 # 0=Disable TCP RFC1323 extensions (for if tcp is slow) -#net.inet.tcp.rfc3390=0 # 0=Disable RFC3390 for TCP window increasing #net.inet.esp.enable=0 # 0=Disable the ESP IPsec protocol #net.inet.ah.enable=0 # 0=Disable the AH IPsec protocol #net.inet.esp.udpencap=0 # 0=Disable ESP-in-UDP encapsulation -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services GmbH, http://bsws.de, Full-Service ISP Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed Henning Brauer Consulting, http://henningbrauer.com/