Skip to content

Commit

Permalink
syncookies: remove Kconfig text line about disabled-by-default
Browse files Browse the repository at this point in the history
syncookies default to on since
e994b7c
(tcp: Don't make syn cookies initial setting depend on CONFIG_SYSCTL).

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
  • Loading branch information
Florian Westphal authored and davem330 committed Jun 4, 2010
1 parent ca73948 commit 57f1553
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions net/ipv4/Kconfig
Original file line number Diff line number Diff line change
Expand Up @@ -303,7 +303,7 @@ config ARPD
If unsure, say N.

config SYN_COOKIES
bool "IP: TCP syncookie support (disabled per default)"
bool "IP: TCP syncookie support"
---help---
Normal TCP/IP networking is open to an attack known as "SYN
flooding". This denial-of-service attack prevents legitimate remote
Expand All @@ -328,13 +328,13 @@ config SYN_COOKIES
server is really overloaded. If this happens frequently better turn
them off.

If you say Y here, note that SYN cookies aren't enabled by default;
you can enable them by saying Y to "/proc file system support" and
If you say Y here, you can disable SYN cookies at run time by
saying Y to "/proc file system support" and
"Sysctl support" below and executing the command

echo 1 >/proc/sys/net/ipv4/tcp_syncookies
echo 0 > /proc/sys/net/ipv4/tcp_syncookies

at boot time after the /proc file system has been mounted.
after the /proc file system has been mounted.

If unsure, say N.

Expand Down

0 comments on commit 57f1553

Please sign in to comment.