set conntrack expectation table to minimum size

2024-04-27 12:48:21 -04:00 · 2024-04-27 12:48:21 -04:00 · 6dbc014f4b
parent a067120a49
commit 6dbc014f4b
1 changed files with 1 additions and 0 deletions
--- a/sysctl.d/local.conf
+++ b/sysctl.d/local.conf
@ -37,6 +37,7 @@ net.mptcp.enabled = 0
 net.netfilter.nf_conntrack_tcp_loose = 0
 net.netfilter.nf_conntrack_tcp_timeout_established = 14400
 net.netfilter.nf_conntrack_tcp_timeout_time_wait = 60
+net.netfilter.nf_conntrack_expect_max = 1

 kernel.yama.ptrace_scope = 2