disable loose TCP connection tracking

2022-07-03 03:50:53 -04:00 · 2022-07-03 03:50:53 -04:00 · 1c47cd88ab
parent 9dbc7347b5
commit 1c47cd88ab
2 changed files with 3 additions and 0 deletions
--- a/modules-load.d/local.conf
+++ b/modules-load.d/local.conf
@ -0,0 +1 @@
+nf_conntrack
--- a/sysctl.d/local.conf
+++ b/sysctl.d/local.conf
@ -25,6 +25,8 @@ net.ipv4.conf.default.send_redirects = 0
 net.ipv4.conf.all.accept_redirects = 0
 net.ipv4.conf.default.accept_redirects = 0

+net.netfilter.nf_conntrack_tcp_loose = 0
+
 kernel.yama.ptrace_scope = 2

 vm.mmap_rnd_bits = 32