search for: tcp_timestamps

Evolution (aka JimPerrin - or is this the other way around?) has been working on this excellent wiki article: http://wiki.centos.org/HowTos/OS_Protection However, the discussion is taking place at his own blog site http://www.bofh-hunter.com/ . Because this is a CentOS wiki article, I just wonder why we cannot do it here. Sure, his blog site may collect a wider audience, but we traditionally

Hi all I have following network question and want you to help 1/ I got the "RX FCSErrors 6" from switch. (router ---link--switch----host). how can I determine it is host issue or router issue? 2/ when I use my linux as router with iptables, do i need to set 0=net.ipv4.tcp_timestamps What parameters in kernel i need to set in linux router to have good performance in router? 3/ what is the best way to capture data for audit later as I sometimes get bandwidth drop in mrtg graph? now I only capture load from top, netstat -i every minutes in cronjob. Thank you for your help...

...connect 4 access points (linksys), each giving connection for every eth2 "C" class Along a week I''ve changed my syslog.ctl like: net.ipv4.ip_forward = 1 net.ipv4.icmp_ignore_bogus_error_responses = 1 net.ipv4.icmp_echo_ignore_broadcasts = 1 net.ipv4.tcp_syncookies = 1 net.ipv4.tcp_timestamps = 0 net.ipv4.tcp_window_scaling = 0 net.ipv4.tcp_sack = 0 net.ipv4.tcp_fin_timeout = 30 net.ipv4.tcp_keepalive_time = 1800 net.ipv4.tcp_low_latency = 1 net.ipv4.tcp_ecn = 0 net.ipv4.conf.all.accept_source_route = 0 net.ipv4.conf.all.accept_redirects = 0 net.ipv4.conf.all.log_martians = 1 net.ipv4.i...

...V1.0 begin ############ net.ipv4.ip_local_port_range = 32768 65000 net.core.rmem_max = 8388608 net.core.wmem_max = 8388608 net.ipv4.tcp_rmem = 4096 87380 8388608 net.ipv4.tcp_wmem = 4096 65536 8388608 net.ipv4.tcp_max_syn_backlog = 8192 net.ipv4.tcp_window_scaling = 0 net.ipv4.tcp_sack = 0 net.ipv4.tcp_timestamps = 0 kernel.panic = 5 vm.swappiness = 51 ########### add by operation V1.0 end ############ net.bridge.bridge-nf-call-ip6tables = 0 net.bridge.bridge-nf-call-iptables = 0 net.bridge.bridge-nf-call-arptables = 0 #add by wdh #net.ipv4.conf.all.proxy_arp = 1 Best Regards, cochen

Configuration: (2) Dual Core Opterons 8GB RAM Apache used to balance 40 mongrel instances We receive Application 500 Errors. Nothing suspect appears in the log, so we are at a lost as to what to do next. Any advice would be welcome and/or an explanation of what types of things cause Application 500 Errors in mongrel. Thanks! - Jared Brown -------------- next part -------------- An HTML

...sys/net/ipv4/conf/all/rp_filter #Don't respond to broadcast pings (Smurf-Amplifier-Protection) echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts #Block source routing echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route #Kill timestamps echo 0 > /proc/sys/net/ipv4/tcp_timestamps #Enable SYN Cookies echo 1 > /proc/sys/net/ipv4/tcp_syncookies #Kill redirects echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects #Enable bad error message protection echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses #Log martians (packets with impossible addresses) echo 1 &...

...d up, server load fine. QOS isn''t used, qdiscs default. I don''t realize what the problem is and even how to debug it. Sysctl config: net/ipv4/ip_forward = 1 net/ipv4/icmp_ignore_bogus_error_responses = 1 net/ipv4/icmp_echo_ignore_broadcasts = 1 net/ipv4/tcp_syncookies = 1 net/ipv4/tcp_timestamps = 0 net/ipv4/tcp_window_scaling = 0 net/ipv4/tcp_sack = 0 net/ipv4/tcp_fin_timeout = 30 net/ipv4/tcp_keepalive_time = 1800 net/ipv4/tcp_low_latency = 1 Thanks for any thoughts. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailm...

...> /proc/sys/net/ipv4/tcp_tw_recycle echo 0 > /proc/sys/net/ipv4/tcp_sack echo 8192 > /proc/sys/net/ipv4/tcp_max_syn_backlog echo 500000 > /proc/sys/net/ipv4/tcp_max_tw_buckets echo 0 > /proc/sys/net/ipv4/tcp_timestamps Linux-Linux ftp 251000kbit/s Linux-XP ftp 40000kbit/s Linux-Linux smbclient 236000kbit/s (3.0.20pre1-1) Linux-XP Explorer 22000kbit/s (3.0.20pre1-1) Linux-XP ftp 40000kbit/s Linux-XP winscp 35000kbit/s Linux-XP winscp(sftp mode) 20000kbit/s Linux-XP ping -f 55000kbit/s Linux-Lin...

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=40 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-02-03 16:49 ------- We haven't seen this

Hello. I'm moving from a very old Fedora Core 1 to CentOS 4.4, what a change!! Three year ago, I wrote some script (network related) and worked very well. Now, I can put into init.d by means of chkconfig and I restarted the system, but always hang when executing my srcipt (in my new centos 4.4). There a manual for making scripts for init.d? there is some new requirement by which it does not

...0 5000 640 512 500 30000 50000 0 0 # Disk cache size vm.buffermem = 60 10 60 # File handle limit fs.file-max = 32768 # Inode limit fs.inode-max = 131072 # TCP/IP time outs net.ipv4.tcp_fin_timeout = 30 net.ipv4.tcp_keepalive_time = 1800 net.ipv4.tcp_window_scaling = 0 net.ipv4.tcp_sack = 0 net.ipv4.tcp_timestamps = 0 # Gigabit nic settings net.core.rmem_max = 262144 net.core.wmem_max = 262144 These I placed in the sysctl.conf file (redhat 7.1 /etc/sysctl.conf ) However it ran very well as it was ... I use KDE for most system administration but found webmin is realy great for most things (http://www.webm...