From d0c6bb1e9064ffdf45f7ac606f708c3f5e7dc247 Mon Sep 17 00:00:00 2001 From: madaidan <50278627+madaidan@users.noreply.github.com> Date: Fri, 4 Oct 2019 17:35:54 +0000 Subject: [PATCH] Disable TCP DSACK and FACK --- etc/sysctl.d/tcp_sack.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/etc/sysctl.d/tcp_sack.conf b/etc/sysctl.d/tcp_sack.conf index 6245fff..f949105 100644 --- a/etc/sysctl.d/tcp_sack.conf +++ b/etc/sysctl.d/tcp_sack.conf @@ -1,2 +1,5 @@ # Disables SACK as it is commonly exploited and likely not needed. +# https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109 net.ipv4.tcp_sack=0 +net.ipv4.tcp_dsack=0 +net.ipv4.tcp_fack=0