diff options
| author | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2008-06-05 14:59:43 -0700 |
|---|---|---|
| committer | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2008-06-05 15:00:34 -0700 |
| commit | a7bd26d39049cf3ac5579b47f1732f07a53f92a4 (patch) | |
| tree | 77f910db893edd3a83eacc725d6290ec0a670301 | |
| parent | a1aabca5146203810f008ffcc4198fdd4230b115 (diff) | |
| download | vyatta-cfg-quagga-a7bd26d39049cf3ac5579b47f1732f07a53f92a4.tar.gz vyatta-cfg-quagga-a7bd26d39049cf3ac5579b47f1732f07a53f92a4.zip | |
Turn off TCP SACK
This is a workaround for bug 3313. The problem is that MD5
uses up what little space there for TCP options in header.
| -rw-r--r-- | sysconf/vyatta-sysctl.conf | 3 | ||||
| -rw-r--r-- | templates/system/login/user/node.tag/shell/node.def | 8 |
2 files changed, 11 insertions, 0 deletions
diff --git a/sysconf/vyatta-sysctl.conf b/sysconf/vyatta-sysctl.conf index 73c4c8ff..cb03a614 100644 --- a/sysconf/vyatta-sysctl.conf +++ b/sysconf/vyatta-sysctl.conf @@ -21,3 +21,6 @@ net.ipv4.icmp_ignore_bogus_error_responses=1 # Send ICMP responses with primary address of exiting interface net.ipv4.icmp_errors_use_inbound_ifaddr=1 + +# Turn off SACK since it causes problems with MD5 due to lack of options space +net.ipv4.tcp_sack=0 diff --git a/templates/system/login/user/node.tag/shell/node.def b/templates/system/login/user/node.tag/shell/node.def new file mode 100644 index 00000000..b1163fdf --- /dev/null +++ b/templates/system/login/user/node.tag/shell/node.def @@ -0,0 +1,8 @@ +type: txt +help: Set command shell +default: fusioncli +syntax:expression: ( $VAR(@) in "fusioncli" "linux" || + exec "if [ -x $VAR(@) -a grep -q $VAR(@) /etc/shells ]; then exit 0; \ + else echo 'Not a valid command shell'; exit 1; fi" +allowed: echo "fusioncli linux" + awk '! /^[ ]*#/ { printf "%s ", $0 }' </etc/shells |