67.52.184.2 at 19:03, 20 February 2007

2007-02-20T19:03:28Z

← Older revision		Revision as of 19:03, 20 February 2007
Line 30:		Line 30:
	kernel.sysrq = 0		kernel.sysrq = 0
	</pre>		</pre>


			{{Notepad}}

67.52.184.2: Syncookie protection setting

2007-02-20T18:15:01Z

Syncookie protection setting

New page

Syncookie from [http://www.linuxjournal.com/article/5310 Linux Journal Article]
<pre>
echo "1" > /proc/sys/net/ipv4/tcp_syncookies
/proc/sys/net/ipv4/conf/all/rp_filter
</pre>

Okay. Change to the <code>/etc/sysconfig</code> directory, and do a cat on your network file. It should look something like this:
<pre>
NETWORKING=yes
FORWARD_IPV4=no
HOSTNAME=netgate.mycompany.com
GATEWAY=192.168.22.10
GATEWAYDEV=
</pre>
In particular, look at the second line (<code>FORWARD_IPV4</code>). For those who aren't already familiar with this concept, IP forwarding means routing. Routing means a networked computer will forward or direct packets between networks, specifically packets from other computers on your network. In this manner, a computer with a single dial-up Internet connection can act as a gateway for a whole network of computers. By default, your system does not do IP forwarding. If you wanted to change it so that at bootup (or network restart) you did have forwarding turned on, you would change the value of FORWARD_IPV4 to "yes" instead of "no". Now, here's a little problem for all you upgraders.

If you are upgrading to Red Hat 6.2 and are currently running with IP forwarding, you may find that things don't seem to be working with your old configuration scripts. If you start with a squeaky-clean 6.2 system, your <code>/etc/sysconfig/network</code> file will have an entry that says something like this (going by memory here):

# FORWARD_IPV4 removed; see /etc/sysctl.conf

The <code>/etc/sysctl.conf</code> file looks like this:
<pre>
# Disables packet forwarding
net.ipv4.ip_forward = 0
# Enables source route verification
net.ipv4.conf.all.rp_filter = 1
# Disables automatic defragmentation (needed for masquerading, LVS)
net.ipv4.ip_always_defrag = 0
# Disables the magic-sysrq key
kernel.sysrq = 0
</pre>

Notepad:Syncookie - Revision history

67.52.184.2 at 19:03, 20 February 2007

67.52.184.2: Syncookie protection setting