From: Mike Baker <mbm@openwrt.org>
Date: Sun, 26 Mar 2006 12:02:53 +0000 (+0000)
Subject: add syncookies
X-Git-Tag: whiterussian_rc5~1
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=82b9424c4cecd238a97f5bd3b836bc04abca5c4a;p=openwrt%2Fsvn-archive%2Fopenwrt.git

add syncookies

SVN-Revision: 3492
---

diff --git a/openwrt/package/base-files/default/etc/sysctl.conf b/openwrt/package/base-files/default/etc/sysctl.conf
index 2050b0c886..2e0efcaf4e 100644
--- a/openwrt/package/base-files/default/etc/sysctl.conf
+++ b/openwrt/package/base-files/default/etc/sysctl.conf
@@ -4,4 +4,5 @@ net.ipv4.icmp_echo_ignore_broadcasts=1
 net.ipv4.icmp_ignore_bogus_error_responses=1
 net.ipv4.tcp_fin_timeout=30
 net.ipv4.tcp_keepalive_time=120
+net.ipv4.tcp_syncookies=1
 net.ipv4.tcp_timestamps=0
diff --git a/openwrt/target/linux/linux-2.4/config/brcm b/openwrt/target/linux/linux-2.4/config/brcm
index 5eaadf77bc..1b4c89e988 100644
--- a/openwrt/target/linux/linux-2.4/config/brcm
+++ b/openwrt/target/linux/linux-2.4/config/brcm
@@ -334,7 +334,7 @@ CONFIG_NET_IPGRE=m
 # CONFIG_IP_MROUTE is not set
 # CONFIG_ARPD is not set
 # CONFIG_INET_ECN is not set
-# CONFIG_SYN_COOKIES is not set
+CONFIG_SYN_COOKIES=y
 
 #
 #   IP: Netfilter Configuration