Пост #130882 |
сохранен 02.01.2020 17:42
- Редактировать пост
- Печать
- Скачать
- Посты-ответы на этот пост: # 156257 # 209672
- Посмотреть дерево постов
-
Сравнить с постом
#
Текст поста
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 | #------------------------------------------------------------------------------ # Modified Calculate Utilities 3.6.7.5 # Processed template files: # /var/db/repos/calculate/profiles/templates/3.6/2_ac_install_merge/sys-apps/baselayout/sysctl.conf # For modify this file, create /etc/sysctl.conf.clt template. #------------------------------------------------------------------------------ # /etc/sysctl.conf # # For more information on how this file works, please see # the manpages sysctl(8) and sysctl.conf(5). # # In order for this file to work properly, you must first # enable 'Sysctl support' in the kernel. # # Look in /proc/sys/ for all the things you can setup. # # Disables packet forwarding net.ipv4.ip_forward = 0 # Disables IP dynaddr #net.ipv4.ip_dynaddr = 0 # Disable ECN #net.ipv4.tcp_ecn = 0 # Enables source route verification #net.ipv4.conf.default.rp_filter = 1 # Enable reverse path #net.ipv4.conf.all.rp_filter = 1 # Enable SYN cookies (yum!) # http://cr.yp.to/syncookies.html #net.ipv4.tcp_syncookies = 1 # Enable people in the specified (min, max) group range to send ICMP_ECHO # messages (i.e. ping) and receive ICMP_ECHOREPLY responses. This allows # you to run non-suid and non-caps `ping`, but it also means anyone with # a gid in this range can send those packets (not just via `ping`). #net.ipv4.ping_group_range = 100 100 # Disable source route #net.ipv4.conf.all.accept_source_route = 0 #net.ipv4.conf.default.accept_source_route = 0 # Disable redirects #net.ipv4.conf.all.accept_redirects = 0 #net.ipv4.conf.default.accept_redirects = 0 # Disable secure redirects #net.ipv4.conf.all.secure_redirects = 0 #net.ipv4.conf.default.secure_redirects = 0 # Ignore ICMP broadcasts #net.ipv4.icmp_echo_ignore_broadcasts = 1 # Disables the magic-sysrq key #kernel.sysrq = 0 # When the kernel panics, automatically reboot in 3 seconds #kernel.panic = 3 # Allow for more PIDs (cool factor!); may break some programs #kernel.pid_max = 999999 # You should compile nfsd into the kernel or add it # to modules.autoload for this to work properly # TCP Port for lock manager #fs.nfs.nlm_tcpport = 0 # UDP Port for lock manager #fs.nfs.nlm_udpport = 0 vm.dirty_background_ratio = 1 vm.dirty_ratio = 3 |