提交 57f1553e 编写于 作者: F Florian Westphal 提交者: David S. Miller

syncookies: remove Kconfig text line about disabled-by-default

syncookies default to on since
e994b7c9
(tcp: Don't make syn cookies initial setting depend on CONFIG_SYSCTL).
Signed-off-by: NFlorian Westphal <fw@strlen.de>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>
上级 ca739481
...@@ -303,7 +303,7 @@ config ARPD ...@@ -303,7 +303,7 @@ config ARPD
If unsure, say N. If unsure, say N.
config SYN_COOKIES config SYN_COOKIES
bool "IP: TCP syncookie support (disabled per default)" bool "IP: TCP syncookie support"
---help--- ---help---
Normal TCP/IP networking is open to an attack known as "SYN Normal TCP/IP networking is open to an attack known as "SYN
flooding". This denial-of-service attack prevents legitimate remote flooding". This denial-of-service attack prevents legitimate remote
...@@ -328,13 +328,13 @@ config SYN_COOKIES ...@@ -328,13 +328,13 @@ config SYN_COOKIES
server is really overloaded. If this happens frequently better turn server is really overloaded. If this happens frequently better turn
them off. them off.
If you say Y here, note that SYN cookies aren't enabled by default; If you say Y here, you can disable SYN cookies at run time by
you can enable them by saying Y to "/proc file system support" and saying Y to "/proc file system support" and
"Sysctl support" below and executing the command "Sysctl support" below and executing the command
echo 1 >/proc/sys/net/ipv4/tcp_syncookies echo 0 > /proc/sys/net/ipv4/tcp_syncookies
at boot time after the /proc file system has been mounted. after the /proc file system has been mounted.
If unsure, say N. If unsure, say N.
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册