mirror of
https://github.com/torvalds/linux.git
synced 2024-11-24 13:11:40 +00:00
syncookies: remove Kconfig text line about disabled-by-default
syncookies default to on since
e994b7c901
(tcp: Don't make syn cookies initial setting depend on CONFIG_SYSCTL).
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
ca73948166
commit
57f1553ee5
@ -303,7 +303,7 @@ config ARPD
|
||||
If unsure, say N.
|
||||
|
||||
config SYN_COOKIES
|
||||
bool "IP: TCP syncookie support (disabled per default)"
|
||||
bool "IP: TCP syncookie support"
|
||||
---help---
|
||||
Normal TCP/IP networking is open to an attack known as "SYN
|
||||
flooding". This denial-of-service attack prevents legitimate remote
|
||||
@ -328,13 +328,13 @@ config SYN_COOKIES
|
||||
server is really overloaded. If this happens frequently better turn
|
||||
them off.
|
||||
|
||||
If you say Y here, note that SYN cookies aren't enabled by default;
|
||||
you can enable them by saying Y to "/proc file system support" and
|
||||
If you say Y here, you can disable SYN cookies at run time by
|
||||
saying Y to "/proc file system support" and
|
||||
"Sysctl support" below and executing the command
|
||||
|
||||
echo 1 >/proc/sys/net/ipv4/tcp_syncookies
|
||||
echo 0 > /proc/sys/net/ipv4/tcp_syncookies
|
||||
|
||||
at boot time after the /proc file system has been mounted.
|
||||
after the /proc file system has been mounted.
|
||||
|
||||
If unsure, say N.
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user