IPCTL_FORWARDING | (ip.forwarding) Boolean: enable/disable forwarding of IP packets. Defaults to off. |
IPCTL_FASTFORWARDING |
| (ip.fastforwarding) Boolean: enable/disable the use of fast IP forwarding code. Defaults to off. When fast IP forwarding is enabled, IP packets are forwarded directly to the appropriate network interface with direct processing to completion, which greatly improves the throughput. All packets for local IP addresses, non-unicast, or with IP options are handled by the normal IP input processing path. All features of the normal (slow) IP forwarding path are supported including firewall (through pfil(9) hooks) checking, except ipsec(4) tunnel brokering. The IP fastforwarding path does not generate ICMP redirect or source quench messages. |
IPCTL_SENDREDIRECTS | (ip.redirect) Boolean: enable/disable sending of ICMP redirects in response to IP packets for which a better, and for the sender directly reachable, route and next hop is known. Defaults to on. |
IPCTL_DEFTTL | (ip.ttl) Integer: default time-to-live ("TTL") to use for outgoing IP packets. |
IPCTL_ACCEPTSOURCEROUTE |
| (ip.accept_sourceroute) Boolean: enable/disable accepting of source-routed IP packets (default false). |
IPCTL_SOURCEROUTE | (ip.sourceroute) Boolean: enable/disable forwarding of source-routed IP packets (default false). |
IPCTL_RTEXPIRE | (ip.rtexpire) Integer: lifetime in seconds of protocol-cloned IP routes after the last reference drops (default one hour). This value varies dynamically as described above. |
IPCTL_RTMINEXPIRE | (ip.rtminexpire) Integer: minimum value of ip.rtexpire (default ten seconds). This value has no effect on user modifications, but restricts the dynamic adaptation described above. |
IPCTL_RTMAXCACHE | (ip.rtmaxcache) Integer: trigger level of cached, unreferenced, protocol-cloned routes which initiates dynamic adaptation (default 128). |
ip.process_options | Integer: control IP options processing. By setting this variable to 0, all IP options in the incoming packets will be ignored, and the packets will be passed unmodified. By setting to 1, IP options in the incoming packets will be processed accordingly. By setting to 2, an ICMP ""prohibited by filter"" message will be sent back in respose to incoming packets with IP options. Default is 1. This sysctl(8) variable affects packets destined for a local host as well as packets forwarded to some other host. |
ip.random_id | Boolean: control IP IDs generation behaviour. Setting this sysctl(8) to non-zero causes the ID field in IP packets to be randomized instead of incremented by 1 with each packet generated. This closes a minor information leak which allows remote observers to determine the rate of packet generation on the machine by watching the counter. In the same time, on high-speed links, it can decrease the ID reuse cycle greatly. Default is 0 (sequential IP IDs). IPv6 flow IDs and fragment IDs are always random. |
ip.maxfragpackets | Integer: maximum number of fragmented packets the host will accept and hold in the reassembling queue simultaneously. 0 means that the host will not accept any fragmented packets. -1 means that the host will accept as many fragmented packets as it receives. |
ip.maxfragsperpacket | Integer: maximum number of fragments the host will accept and hold in the reassembling queue for a packet. 0 means that the host will not accept any fragmented packets. |
|