sysctl variable definitions
Steve Clark <[email protected]> Thu, 26 Jan 2012 10:49:48 -0500
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <11208_1327593155_4F2176C0_11208_3184_1_4F21761C.9030503@netwolves.com> |
This is a multi-part message in MIME format. --------------080003080700090009070803 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi Darren, Glad your back. Is there any documentation that describes what the various sysctl setting do in terms of effecting ipfilter. I have searched but have not been able to turn up anything definitive. fr_flags min 0 max 0xffffffff current 0 fr_active min 0 max 0 current 0 fr_control_forwarding min 0 max 0x1 current 0 fr_update_ipid min 0 max 0x1 current 0 fr_chksrc min 0 max 0x1 current 0 fr_minttl min 0 max 0x1 current 4 fr_icmpminfragmtu min 0 max 0x1 current 68 fr_pass min 0 max 0xffffffff current 134217730 fr_tcpidletimeout min 0x1 max 0x7fffffff current 86400 fr_tcpclosewait min 0x1 max 0x7fffffff current 480 fr_tcplastack min 0x1 max 0x7fffffff current 60 fr_tcptimeout min 0x1 max 0x7fffffff current 480 fr_tcpclosed min 0x1 max 0x7fffffff current 60 fr_tcphalfclosed min 0x1 max 0x7fffffff current 7200 fr_udptimeout min 0x1 max 0x7fffffff current 240 fr_udpacktimeout min 0x1 max 0x7fffffff current 24 fr_icmptimeout min 0x1 max 0x7fffffff current 120 fr_icmpacktimeout min 0x1 max 0x7fffffff current 12 fr_iptimeout min 0x1 max 0x7fffffff current 120 fr_statemax min 0x1 max 0x7fffffff current 10163 fr_statesize min 0x1 max 0x7fffffff current 14983 fr_state_lock min 0 max 0x1 current 0 fr_state_maxbucket min 0x1 max 0x7fffffff current 28 fr_state_maxbucket_reset min 0 max 0x1 current 1 ipstate_logging min 0 max 0x1 current 1 fr_nat_lock min 0 max 0x1 current 0 ipf_nattable_sz min 0x1 max 0x7fffffff current 16889 ipf_nattable_max min 0x1 max 0x7fffffff current 50000 ipf_natrules_sz min 0x1 max 0x7fffffff current 509 ipf_rdrrules_sz min 0x1 max 0x7fffffff current 509 ipf_hostmap_sz min 0x1 max 0x7fffffff current 8087 fr_nat_maxbucket min 0x1 max 0x7fffffff current 30 fr_nat_maxbucket_reset min 0 max 0x1 current 1 nat_logging min 0 max 0x1 current 1 fr_defnatage min 0x1 max 0x7fffffff current 1200 fr_defnatipage min 0x1 max 0x7fffffff current 120 fr_defnaticmpage min 0x1 max 0x7fffffff current 6 fr_nat_doflush min 0 max 0x1 current 0 ipf_proxy_debug min 0 max 0xa current 0 ipfr_size min 0x1 max 0x7fffffff current 257 fr_ipfrttl min 0x1 max 0x7fffffff current 120 ipl_suppress min 0 max 0x1 current 1 ipl_logmax min 0 max 0x7fffffff current 7 ipl_logall min 0 max 0x1 current 0 ipl_logsize min 0 max 0x80000 current 8192 ippr_ftp_debug min 0 max 0xa current 0 -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: [email protected] http://www.netwolves.com --------------080003080700090009070803 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body text="#000000" bgcolor="#ffffff"> Hi Darren,<br> <br> Glad your back.<br> <br> Is there any documentation that describes what the various sysctl setting do in<br> terms of effecting ipfilter. I have searched but have not been able to turn up<br> anything definitive.<br> <br> fr_flags min 0 max 0xffffffff current 0<br> fr_active min 0 max 0 current 0<br> fr_control_forwarding min 0 max 0x1 current 0<br> fr_update_ipid min 0 max 0x1 current 0<br> fr_chksrc min 0 max 0x1 current 0<br> fr_minttl min 0 max 0x1 current 4<br> fr_icmpminfragmtu min 0 max 0x1 current 68<br> fr_pass min 0 max 0xffffffff current 134217730<br> fr_tcpidletimeout min 0x1 max 0x7fffffff current 86400<br> fr_tcpclosewait min 0x1 max 0x7fffffff current 480<br> fr_tcplastack min 0x1 max 0x7fffffff current 60<br> fr_tcptimeout min 0x1 max 0x7fffffff current 480<br> fr_tcpclosed min 0x1 max 0x7fffffff current 60<br> fr_tcphalfclosed min 0x1 max 0x7fffffff current 7200<br> fr_udptimeout min 0x1 max 0x7fffffff current 240<br> fr_udpacktimeout min 0x1 max 0x7fffffff current 24<br> fr_icmptimeout min 0x1 max 0x7fffffff current 120<br> fr_icmpacktimeout min 0x1 max 0x7fffffff current 12<br> fr_iptimeout min 0x1 max 0x7fffffff current 120<br> fr_statemax min 0x1 max 0x7fffffff current 10163<br> fr_statesize min 0x1 max 0x7fffffff current 14983<br> fr_state_lock min 0 max 0x1 current 0<br> fr_state_maxbucket min 0x1 max 0x7fffffff current 28<br> fr_state_maxbucket_reset min 0 max 0x1 current 1<br> ipstate_logging min 0 max 0x1 current 1<br> fr_nat_lock min 0 max 0x1 current 0<br> ipf_nattable_sz min 0x1 max 0x7fffffff current 16889<br> ipf_nattable_max min 0x1 max 0x7fffffff current 50000<br> ipf_natrules_sz min 0x1 max 0x7fffffff current 509<br> ipf_rdrrules_sz min 0x1 max 0x7fffffff current 509<br> ipf_hostmap_sz min 0x1 max 0x7fffffff current 8087<br> fr_nat_maxbucket min 0x1 max 0x7fffffff current 30<br> fr_nat_maxbucket_reset min 0 max 0x1 current 1<br> nat_logging min 0 max 0x1 current 1<br> fr_defnatage min 0x1 max 0x7fffffff current 1200<br> fr_defnatipage min 0x1 max 0x7fffffff current 120<br> fr_defnaticmpage min 0x1 max 0x7fffffff current 6<br> fr_nat_doflush min 0 max 0x1 current 0<br> ipf_proxy_debug min 0 max 0xa current 0<br> ipfr_size min 0x1 max 0x7fffffff current 257<br> fr_ipfrttl min 0x1 max 0x7fffffff current 120<br> ipl_suppress min 0 max 0x1 current 1<br> ipl_logmax min 0 max 0x7fffffff current 7<br> ipl_logall min 0 max 0x1 current 0<br> ipl_logsize min 0 max 0x80000 current 8192<br> ippr_ftp_debug min 0 max 0xa current 0<br> <br> <br> <br> <div class="moz-signature">-- <br> Stephen Clark<br> <b>NetWolves</b><br> Director of Technology<br> Phone: 813-579-3200<br> Fax: 813-882-0209<br> Email: <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a><br> <a class="moz-txt-link-freetext" href="http://www.netwolves.com">http://www.netwolves.com</a><br> </div> </body> </html> --------------080003080700090009070803--