From e92a8a69665f982e8b5a37f7081fa75197cde828 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Mon, 7 Oct 2019 08:24:02 +0000 Subject: [PATCH] comments --- etc/sysctl.d/tcp_hardening.conf | 3 ++- etc/sysctl.d/tcp_timestamps.conf | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/etc/sysctl.d/tcp_hardening.conf b/etc/sysctl.d/tcp_hardening.conf index 1376f18..edc5d8c 100644 --- a/etc/sysctl.d/tcp_hardening.conf +++ b/etc/sysctl.d/tcp_hardening.conf @@ -4,7 +4,8 @@ #### meta start #### project Whonix #### category networking and security -#### description TCP/IP stack hardening +#### description +## TCP/IP stack hardening ## Protects against time-wait assassination. ## It drops RST packets for sockets in the time-wait state. diff --git a/etc/sysctl.d/tcp_timestamps.conf b/etc/sysctl.d/tcp_timestamps.conf index 98ba7e9..0d20e9c 100644 --- a/etc/sysctl.d/tcp_timestamps.conf +++ b/etc/sysctl.d/tcp_timestamps.conf @@ -4,7 +4,8 @@ #### meta start #### project Whonix #### category networking and security -#### description disable IPv4 TCP Timestamps +#### description +## disable IPv4 TCP Timestamps net.ipv4.tcp_timestamps=0