KeRo99

#
# Disables IP source routing
#
net.ipv4.conf.all.accept_source_route = 0
#
net.ipv4.conf.lo.accept_source_route = 0
#
net.ipv4.conf.eth0.accept_source_route = 0
#
net.ipv4.conf.default.accept_source_route = 0
#

#
# Enable IP spoofing protection, turn on source route verification
#
net.ipv4.conf.all.rp_filter = 1
#
net.ipv4.conf.lo.rp_filter = 1
#
net.ipv4.conf.eth0.rp_filter = 1
#
net.ipv4.conf.default.rp_filter = 1
#

#
# Disable ICMP Redirect Acceptance
#
net.ipv4.conf.all.accept_redirects = 0
#
net.ipv4.conf.lo.accept_redirects = 0
#
net.ipv4.conf.eth0.accept_redirects = 0
#
net.ipv4.conf.default.accept_redirects = 0
#

#
# Enable Log Spoofed Packets, Source Routed Packets, Redirect Packets
#
net.ipv4.conf.all.log_martians = 0
#
net.ipv4.conf.lo.log_martians = 0
#
net.ipv4.conf.eth0.log_martians = 0
#

#
# Disables IP source routing
#
net.ipv4.conf.all.accept_source_route = 0
#
net.ipv4.conf.lo.accept_source_route = 0
#
net.ipv4.conf.eth0.accept_source_route = 0
#
net.ipv4.conf.default.accept_source_route = 0
#

#
# Enable IP spoofing protection, turn on source route verification
#
net.ipv4.conf.all.rp_filter = 1
#
net.ipv4.conf.lo.rp_filter = 1
#
net.ipv4.conf.eth0.rp_filter = 1 net.ipv4.conf.default.rp_filter = 1
#

#
# Disable ICMP Redirect Acceptance
#
net.ipv4.conf.all.accept_redirects = 0
#
net.ipv4.conf.lo.accept_redirects = 0
#
net.ipv4.conf.eth0.accept_redirects = 0
#
net.ipv4.conf.default.accept_redirects = 0
#

#

#
# Decrease the time default value for tcp_fin_timeout connection
#
net.ipv4.tcp_fin_timeout = 15
#

#
# Decrease the time default value for tcp_keepalive_time connection
#
net.ipv4.tcp_keepalive_time = 1800
#

#
# Turn off the tcp_window_scaling
#
net.ipv4.tcp_window_scaling = 0
#

#
# Turn off the tcp_sack
#
net.ipv4.tcp_sack = 0
#

#
# Turn off the tcp_timestamps
#
net.ipv4.tcp_timestamps = 0
#

#
# Enable TCP SYN Cookie Protection
#
net.ipv4.tcp_syncookies = 1
#

#
# Enable ignoring broadcasts request
#
net.ipv4.icmp_echo_ignore_broadcasts = 1
#

#
# Enable bad error message Protection
#
net.ipv4.icmp_ignore_bogus_error_responses = 1
#

#
# Log Spoofed Packets, Source Routed Packets, Redirect Packets
#
net.ipv4.conf.all.log_martians = 0
#

#
# Increases the size of the socket queue (effectively, q0).
#
net.ipv4.tcp_max_syn_backlog = 1024
#

#
# Increase the tcp-time-wait buckets pool size
#
net.ipv4.tcp_max_tw_buckets = 1440000
#

#
# Allowed local port range
#
net.ipv4.ip_local_port_range = 16384 65536
#

#
# CUSTOM PART
#
fs.file-max = 65536
#

#
kernel.core_pattern = core.%p kernel.sem = 512 32000 100 512
#

#
vm.swappiness = 0

net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216