tcp_rfc1337

Protect Your Server from TCP TIME_WAIT Assassination with tcp_rfc1337

This kernel parameter is disabled by default, and while not typically at the top of anyone's radar, it can sometimes be useful to enable it. If you have socket connections stuck in TIME_WAIT, it will drop the RST packets.

You can enable it in the proc filesystem, or in /etc/sysctl.conf.

(Comments)

Comments