dserver@Y04S12:~$ cat /etc/sysctl.conf
#
# /etc/sysctl.conf - Configuration file for setting system variables
# See sysctl.conf (5) for information.
#
#kernel.domainname = example.com
#net/ipv4/icmp_echo_ignore_broadcasts=1
# Uncomment the following to stop low-level messages on console
#kernel.printk = 4 4 1 7
##############################################################3
# Functions previously found in netbase
#
# Uncomment the next two lines to enable Spoof protection (reverse-path filter)
#net.ipv4.conf.default.rp_filter=1
#net.ipv4.conf.all.rp_filter=1
# Uncomment the next line to enable TCP/IP SYN cookies
#net.ipv4.tcp_syncookies=1
# Uncomment the next line to enable packet forwarding for IPv4
#net.ipv4.conf.default.forwarding=1
# Uncomment the next line to enable packet forwarding for IPv6
#net.ipv6.conf.default.forwarding=1
# My custom shit
net.core.rmem_max = 8388608
net.ipv4.tcp_rmem = 4096 1048576 8388608
net.core.wmem_max = 8388608
net.ipv4.tcp_wmem = 4096 1048576 8388608
net.ipv4.tcp_mem = 8388608 8388608 8388608
net.core.optmem_max = 40960
# tcp-time-wait buckets pool size from
# net.ipv4.tcp_max_tw_buckets = 180000
# to 360000
net.ipv4.tcp_max_tw_buckets=360000
# Increase the maximum number of skb-heads to be cached from 128
net.core.hot_list_length=256
# increase from 300 to 1024
net.core.netdev_max_backlog=1024
#increase TCP Re-Ordering value in kernel from 3 to 5
net.ipv4.tcp_reordering=5
# change from 0 to 1 to Enable ignoring broadcasts request
net.ipv4.icmp_echo_ignore_broadcasts=1
# change from 0 to 1 to enable syn cookies protection
net.ipv4.tcp_syncookies=1
# turn on TCP time stamps
net.ipv4.tcp_timestamps=1
# change from 0 to 1 (fack was enabled already)
net.ipv4.tcp_sack=1
# change from 0 to 1 for TCP window scaling
net.ipv4.tcp_window_scaling=1
# decrease from 1400 to 1200 for tcp_keepalive_time connection
net.ipv4.tcp_keepalive_time=1200
# decrease from 1400 to 25
net.ipv4.tcp_fin_timeout=25
# change from 0 to 1 to Log Spoofed Packets, Source Routed Packets, Redirect Packets
net.ipv4.conf.default.log_martians=1
net.ipv4.conf.all.log_martians=1
#disable ICMP redirects
net.ipv4.conf.default.accept_redirects=0
net.ipv4.conf.all.accept_redirects=0
# disable IP source routing
net.ipv4.conf.default.accept_source_route=0
net.ipv4.conf.all.accept_source_route=0
# enable source route verification
net.ipv4.conf.all.rp_filter=1
net.ipv4.conf.default.rp_filter=1