sysvinit/etc/sysctl.conf

# /etc/sysctl.conf: kernel parameters configuration file
# $Id$
#
# For more information on how this file works, please see
# the manpages sysctl(8) and sysctl.conf(5).
#
# In order for this file to work properly, you must first
# enable 'Sysctl support' in the kernel.
#
# Look in /proc/sys/ for all the things you can setup.
#

# Disables packet forwarding
#net.ipv4.ip_forward = 0
# Disables IP dynaddr
#net.ipv4.ip_dynaddr = 0
# Disable ECN
#net.ipv4.tcp_ecn = 0
# Enables source route verification
net.ipv4.conf.default.rp_filter = 1
# Enable reverse path
net.ipv4.conf.all.rp_filter = 1

# Disable source route
#net.ipv4.conf.all.accept_source_route = 0
#net.ipv4.conf.default.accept_source_route = 0

# Disable redirects
#net.ipv4.conf.all.accept_redirects = 0
#net.ipv4.conf.default.accept_redirects = 0

# Disable secure redirects
#net.ipv4.conf.all.secure_redirects = 0
#net.ipv4.conf.default.secure_redirects = 0

# Ignore ICMP broadcasts
#net.ipv4.icmp_echo_ignore_broadcasts = 1

# Disables the magic-sysrq key
#kernel.sysrq = 0
# When the kernel panics, automatically reboot in 3 seconds
#kernel.panic = 3
# Allow for more PIDs (cool factor!); may break some programs
#kernel.pid_max = 999999

# TCP Port for lock manager
#fs.nfs.nlm_tcpport = 0
# UDP Port for lock manager
#fs.nfs.nlm_udpport = 0

# Adjust realtime clock - mplayer and co take advantage
#dev.rtc.max-user-freq = 1024

#
# Generally needed parameters for OpenVZ
#
# # packet forwarding enabled and proxy arp disabled
# net.ipv4.ip_forward = 1
# net.ipv4.conf.default.proxy_arp = 0
# # Enables source route verification
# net.ipv4.conf.all.rp_filter = 1
# # Enables the magic-sysrq key
# kernel.sysrq = 1
# # TCP Explict Congestion Notification
# #net.ipv4.tcp_ecn = 0
# # allow not all interfaces to send redirects
# net.ipv4.conf.default.send_redirects = 1
# net.ipv4.conf.all.send_redirects = 0
1	# /etc/sysctl.conf: kernel parameters configuration file
2	# $Id$
3	#
4	# For more information on how this file works, please see
5	# the manpages sysctl(8) and sysctl.conf(5).
6	#
7	# In order for this file to work properly, you must first
8	# enable 'Sysctl support' in the kernel.
9	#
10	# Look in /proc/sys/ for all the things you can setup.
11	#
12
13	# Disables packet forwarding
14	#net.ipv4.ip_forward = 0
15	# Disables IP dynaddr
16	#net.ipv4.ip_dynaddr = 0
17	# Disable ECN
18	#net.ipv4.tcp_ecn = 0
19	# Enables source route verification
20	net.ipv4.conf.default.rp_filter = 1
21	# Enable reverse path
22	net.ipv4.conf.all.rp_filter = 1
23
24	# Disable source route
25	#net.ipv4.conf.all.accept_source_route = 0
26	#net.ipv4.conf.default.accept_source_route = 0
27
28	# Disable redirects
29	#net.ipv4.conf.all.accept_redirects = 0
30	#net.ipv4.conf.default.accept_redirects = 0
31
32	# Disable secure redirects
33	#net.ipv4.conf.all.secure_redirects = 0
34	#net.ipv4.conf.default.secure_redirects = 0
35
36	# Ignore ICMP broadcasts
37	#net.ipv4.icmp_echo_ignore_broadcasts = 1
38
39	# Disables the magic-sysrq key
40	#kernel.sysrq = 0
41	# When the kernel panics, automatically reboot in 3 seconds
42	#kernel.panic = 3
43	# Allow for more PIDs (cool factor!); may break some programs
44	#kernel.pid_max = 999999
45
46	# TCP Port for lock manager
47	#fs.nfs.nlm_tcpport = 0
48	# UDP Port for lock manager
49	#fs.nfs.nlm_udpport = 0
50
51	# Adjust realtime clock - mplayer and co take advantage
52	#dev.rtc.max-user-freq = 1024
53
54	#
55	# Generally needed parameters for OpenVZ
56	#
57	# # packet forwarding enabled and proxy arp disabled
58	# net.ipv4.ip_forward = 1
59	# net.ipv4.conf.default.proxy_arp = 0
60	# # Enables source route verification
61	# net.ipv4.conf.all.rp_filter = 1
62	# # Enables the magic-sysrq key
63	# kernel.sysrq = 1
64	# # TCP Explict Congestion Notification
65	# #net.ipv4.tcp_ecn = 0
66	# # allow not all interfaces to send redirects
67	# net.ipv4.conf.default.send_redirects = 1
68	# net.ipv4.conf.all.send_redirects = 0