From cb5f0da0d5c1e54318bb10ea9609b256876bce41 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 27 Jun 2013 09:04:28 +0100 Subject: [PATCH 1/1] Explicitly turn on syncookies everywhere --- roles/base.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/base.rb b/roles/base.rb index 15c913d3d..2e2805142 100644 --- a/roles/base.rb +++ b/roles/base.rb @@ -49,9 +49,9 @@ default_attributes( } }, :tcp_syncookies => { - :comment => "Turn off syncookies as they interact badly with the firewall", + :comment => "Turn on syncookies to protect against SYN floods", :parameters => { - "net.ipv4.tcp_syncookies" => "0" + "net.ipv4.tcp_syncookies" => "1" } } }, -- 2.43.2