- Conntrack changes (net.netfilter.nf_conntrack_max=262144 and 65536 hashsize)
- Disabled no_rebroadcast-option.patch
This commit is contained in:
		
							parent
							
								
									d02f11434f
								
							
						
					
					
						commit
						c23adcc664
					
				@ -56,8 +56,8 @@ sleep 5
 | 
			
		||||
 | 
			
		||||
# Fixing the nf_conntrack … dropping packets error
 | 
			
		||||
# hashsize = nf_conntrack_max / 4
 | 
			
		||||
sysctl -w net.netfilter.nf_conntrack_max=131072
 | 
			
		||||
echo 32768 > /sys/module/nf_conntrack/parameters/hashsize
 | 
			
		||||
sysctl -w net.netfilter.nf_conntrack_max=262144
 | 
			
		||||
echo 65536 > /sys/module/nf_conntrack/parameters/hashsize
 | 
			
		||||
 | 
			
		||||
# Against Denial of Service attacks from internal network
 | 
			
		||||
# Check with: sysctl -a | grep conntrack | grep timeout
 | 
			
		||||
 | 
			
		||||
@ -9,7 +9,7 @@
 | 
			
		||||
  user: root
 | 
			
		||||
  gather_facts: False
 | 
			
		||||
  vars:
 | 
			
		||||
    snversion: master_v3.0.0
 | 
			
		||||
    snversion: master_v3.0.1
 | 
			
		||||
    batmanversion: v2015.2
 | 
			
		||||
    common_required_packages:
 | 
			
		||||
      - git
 | 
			
		||||
@ -130,9 +130,9 @@
 | 
			
		||||
           dest=/tmp/batman-adv
 | 
			
		||||
      when: aptupdates.changed
 | 
			
		||||
      register: getbatman
 | 
			
		||||
    - name: Get batman-adv no rebrotcast patch
 | 
			
		||||
      get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
 | 
			
		||||
      when: getbatman.changed
 | 
			
		||||
#    - name: Get batman-adv no rebrotcast patch
 | 
			
		||||
#      get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
 | 
			
		||||
#      when: getbatman.changed
 | 
			
		||||
    - name: Install batman-adv
 | 
			
		||||
      shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && make && make install
 | 
			
		||||
#      shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && git apply 1001-batman-adv-introduce-no_rebroadcast-option.patch && make && make install
 | 
			
		||||
 | 
			
		||||
		Loading…
	
		Reference in New Issue
	
	Block a user