Commit 57f1553e authored by Florian Westphal's avatar Florian Westphal Committed by David S. Miller
Browse files

syncookies: remove Kconfig text line about disabled-by-default 



syncookies default to on since
e994b7c9
(tcp: Don't make syn cookies initial setting depend on CONFIG_SYSCTL).

Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ca739481

net/ipv4/Kconfig

+5 −5
Original line number Diff line number Diff line
@@ -303,7 +303,7 @@ config ARPD 
	  If unsure, say N.



config SYN_COOKIES

	bool "IP: TCP syncookie support (disabled per default)"

	bool "IP: TCP syncookie support"

	---help---

	  Normal TCP/IP networking is open to an attack known as "SYN

	  flooding". This denial-of-service attack prevents legitimate remote
@@ -328,13 +328,13 @@ config SYN_COOKIES 
	  server is really overloaded. If this happens frequently better turn

	  them off.



	  If you say Y here, note that SYN cookies aren't enabled by default;

	  you can enable them by saying Y to "/proc file system support" and

	  If you say Y here, you can disable SYN cookies at run time by

	  saying Y to "/proc file system support" and

	  "Sysctl support" below and executing the command



	  echo 1 >/proc/sys/net/ipv4/tcp_syncookies

	  echo 0 > /proc/sys/net/ipv4/tcp_syncookies



	  at boot time after the /proc file system has been mounted.

	  after the /proc file system has been mounted.



	  If unsure, say N.