security-misc/etc/sysctl.d/tcp_sack.conf

## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.

## Disables SACK as it is commonly exploited and likely not needed.
## https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109
#net.ipv4.tcp_sack=0
#net.ipv4.tcp_dsack=0
#net.ipv4.tcp_fack=0
copyright / comments 2019-10-07 01:30:56 -04:00			`## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>`
			`## See the file COPYING for copying conditions.`

comments 2019-10-06 06:18:24 -04:00			`## Disables SACK as it is commonly exploited and likely not needed.`
			`## https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109`
comment out sack by default https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/8?u=patrick 2019-10-05 09:15:34 -04:00			`#net.ipv4.tcp_sack=0`
			`#net.ipv4.tcp_dsack=0`
			`#net.ipv4.tcp_fack=0`