security-misc/etc/sysctl.d/tcp_sack.conf

## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.

## Disables SACK as it is commonly exploited and likely not needed.
## https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109
#net.ipv4.tcp_sack=0
#net.ipv4.tcp_dsack=0
#net.ipv4.tcp_fack=0
copyright / comments 2019-10-07 05:30:56 +00:00			`## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>`
			`## See the file COPYING for copying conditions.`

comments 2019-10-06 10:18:24 +00:00			`## Disables SACK as it is commonly exploited and likely not needed.`
			`## https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109`
comment out sack by default https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/8?u=patrick 2019-10-05 13:15:34 +00:00			`#net.ipv4.tcp_sack=0`
			`#net.ipv4.tcp_dsack=0`
			`#net.ipv4.tcp_fack=0`