diff --git a/etc/sysctl.d/30_security-misc.conf b/etc/sysctl.d/30_security-misc.conf index e5d1176..37524fb 100644 --- a/etc/sysctl.d/30_security-misc.conf +++ b/etc/sysctl.d/30_security-misc.conf @@ -101,7 +101,7 @@ net.ipv4.conf.all.rp_filter=1 #### meta end -## Disables SACK as it is commonly exploited and likely not needed. +## Previously disabled SACK, DSACK, and FACK. ## https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109 #net.ipv4.tcp_sack=0 #net.ipv4.tcp_dsack=0