sysctl: Remove net.ipv4.tcp_syncookies

This is the default value. No reason to enforce a default, especially if its in a package where it can be overrided anyway from /etc or from cmdline. Signed-off-by: Eric Naim <[email protected]>
CachyOS · Nov 26, 2024 · ab0dcb2 · ab0dcb2
1 parent cf85034
commit ab0dcb2
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/usr/lib/sysctl.d/99-cachyos-settings.conf b/usr/lib/sysctl.d/99-cachyos-settings.conf
@@ -49,10 +49,6 @@ kernel.kexec_load_disabled = 1
 # Using the value 3 instead of the default 1 allows TCP Fast Open for both incoming and outgoing connections:
 net.ipv4.tcp_fastopen = 3
 
-# TCP SYN cookie protection
-# Helps protect against SYN flood attacks. Only kicks in when net.ipv4.tcp_max_syn_backlog is reached:
-net.ipv4.tcp_syncookies = 1
-
 # TCP Enable ECN Negotiation by default
 net.ipv4.tcp_ecn = 1