summaryrefslogtreecommitdiff
path: root/sysconf/vyatta-sysctl.conf
diff options
context:
space:
mode:
Diffstat (limited to 'sysconf/vyatta-sysctl.conf')
-rw-r--r--sysconf/vyatta-sysctl.conf10
1 files changed, 7 insertions, 3 deletions
diff --git a/sysconf/vyatta-sysctl.conf b/sysconf/vyatta-sysctl.conf
index 01ae92f8..e336ddbb 100644
--- a/sysconf/vyatta-sysctl.conf
+++ b/sysconf/vyatta-sysctl.conf
@@ -54,16 +54,17 @@ net.ipv4.conf.default.rp_filter=0
# Enable tcp syn-cookies by default
net.ipv4.tcp_syncookies=1
-# Disable accept_redirects for all
-net.ipv4.conf.all.accept_redirects=0
-
# Disable accept_redirects by default for any interface
net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.default.accept_redirects=0
+net.ipv6.conf.all.accept_redirects=0
+net.ipv6.conf.default.accept_redirects=0
# Disable accept_source_route by default
net.ipv4.conf.all.accept_source_route=0
net.ipv4.conf.default.accept_source_route=0
+net.ipv6.conf.all.accept_source_route=0
+net.ipv6.conf.default.accept_source_route=0
# Enable send_redirects by default
net.ipv4.conf.all.send_redirects=1
@@ -74,6 +75,9 @@ net.core.rmem_max=2097152
# Enable packet forwarding for IPv6
net.ipv6.conf.all.forwarding=1
+# Increase route table limit
+net.ipv6.route.max_size = 262144
+
# Do not forget IPv6 addresses when a link goes down
net.ipv6.conf.default.keep_addr_on_down=1
net.ipv6.conf.all.keep_addr_on_down=1