Re: drop synfin

From: Alexander Leidinger <Alexander_at_Leidinger.net>
Date: Sun, 11 Aug 2024 18:58:42 UTC
Am 2024-08-10 17:22, schrieb void:
> Hi,
> 
> Is it sufficient to
> 
> EITHER
> 
> 1. # sysctl net.inet.tcp.drop_synfin=1

This changes the current setting (activates the feature in the currently 
running system, but not after the next reboot).

> 2. # sysrc tcp_drop_synfin=YES

This activates the feature on next reboot (or start of the rc.d/ script 
which looks at this setting).

> or
> 
> 3. must one do both ?

Depends on what you want to do... having it currently active and active 
on next reboot -> yes, both.

Bye,
Alexander.

-- 
http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF
http://www.FreeBSD.org    netchild@FreeBSD.org  : PGP 0x8F31830F9F2772BF