[Devil-linux-commit] build/config/etc sysctl.conf,NONE,1.1.2.1

[Heiko Z. <smi...@us...>]

Update of /cvsroot/devil-linux/build/config/etc
In directory sc8-pr-cvs12.sourceforge.net:/tmp/cvs-serv27180/config/etc

Added Files:
      Tag: rel-1-2-patches
	sysctl.conf 
Log Message:
- added default /etc/sysctl.conf (Kari Mattson + Heiko)
- ebtables is correctly build again (unkown + Heiko)
- updated Linux-PAM to 0.99.6.3
- updated cdrtools to 2.01.01a13
- updated mrtg to 2.14.7
- updated openssl to 0.9.7k
- updated pptp to 1.7.1
- updated pptpd to 1.3.3


--- NEW FILE: sysctl.conf ---
# /etc/sysctl.conf

# A note on interfaces:
#  ..conf.all.. denotes all current and future interfaces
#  ..conf.default.. denotes all future interfaces
#  ..conf.xxx.. denotes that specified interface

# If this is a proxyarp firewall, you have to enable (1) proxyarp
# on selected interfaces. Otherwise, leave it all disabled (0).
net.ipv4.conf.all.proxy_arp = 0
#net.ipv4.conf.eth0.proxy_arp = 1
#net.ipv4.conf.eth2.proxy_arp = 1

# Enable (0) or disable (1) replying to normal pings.
net.ipv4.icmp_echo_ignore_all = 0

# Enable (0) or disable (1) replying to broadcast and multicast pings.
net.ipv4.icmp_echo_ignore_broadcasts = 1

# Enable (1) normally; disable (0) on some special, complex firewalls.
net.ipv4.conf.all.rp_filter = 1

# There is really no need for source routes due to security.
net.ipv4.conf.all.accept_source_route = 0

# There is really no need to accept redirects due to security.
net.ipv4.conf.all.accept_redirects = 0

# There is really no need to accept redirects due to security.
net.ipv4.conf.all.secure_redirects = 0

# Enable (1) only on some rare router/firewall setups.
net.ipv4.conf.all.send_redirects = 0

# Enable (1) or disable (0) logging packets which are received with
# illegal source address; internal IP coming in from outside etc.
net.ipv4.conf.all.log_martians = 1
#net.ipv4.conf.default.log_martians = 1
#net.ipv4.conf.eth0.log_martians = 1
#net.ipv4.conf.eth1.log_martians = 1

# Enable (1) or disable (0) TCP SYN cookie protection.
net.ipv4.tcp_syncookies = 1

# TCP FIN handshaking phase timeout in seconds.
#net.ipv4.tcp_fin_timeout = 20

# Keep TCP connections open, they might auto close otherwise.
#net.ipv4.tcp_keepalive_intvl = 60