# Disables SACK as it is commonly exploited and likely not needed. net.ipv4.tcp_sack=0