Securing-Optimizing-RH-Linux-1_2_75
Comments and suggestions concerning this book should be mailed to gmourani@videotron.ca
© Copyright 1999-2000 Gerhard Mourani and Open Network Architecture ®
75
amount of time your Linux box will try take to finish closing a connect and the amount of time
before it will kill a stale connection. This will also turn off some IP extensions that aren't needed:
[root@deep /]# echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout
[root@deep /]# echo 1800 >/proc/sys/net/ipv4/tcp_keepalive_time
[root@deep /]# echo 0 > /proc/sys/net/ipv4/tcp_window_scaling
[root@deep /]# echo 0 > /proc/sys/net/ipv4/tcp_sack
[root@deep /]# echo 0 > /proc/sys/net/ipv4/tcp_timestamps
NOTE: Execute the above commands and put them in your /etc/rc.d/rc.local file so you dont
need to type them again each time your system reboots.