- Conntrack changes (net.netfilter.nf_conntrack_max=262144 and 65536 hashsize)
- Disabled no_rebroadcast-option.patch
This commit is contained in:
parent
d02f11434f
commit
c23adcc664
@ -56,8 +56,8 @@ sleep 5
|
||||
|
||||
# Fixing the nf_conntrack … dropping packets error
|
||||
# hashsize = nf_conntrack_max / 4
|
||||
sysctl -w net.netfilter.nf_conntrack_max=131072
|
||||
echo 32768 > /sys/module/nf_conntrack/parameters/hashsize
|
||||
sysctl -w net.netfilter.nf_conntrack_max=262144
|
||||
echo 65536 > /sys/module/nf_conntrack/parameters/hashsize
|
||||
|
||||
# Against Denial of Service attacks from internal network
|
||||
# Check with: sysctl -a | grep conntrack | grep timeout
|
||||
|
@ -9,7 +9,7 @@
|
||||
user: root
|
||||
gather_facts: False
|
||||
vars:
|
||||
snversion: master_v3.0.0
|
||||
snversion: master_v3.0.1
|
||||
batmanversion: v2015.2
|
||||
common_required_packages:
|
||||
- git
|
||||
@ -130,9 +130,9 @@
|
||||
dest=/tmp/batman-adv
|
||||
when: aptupdates.changed
|
||||
register: getbatman
|
||||
- name: Get batman-adv no rebrotcast patch
|
||||
get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
|
||||
when: getbatman.changed
|
||||
# - name: Get batman-adv no rebrotcast patch
|
||||
# get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
|
||||
# when: getbatman.changed
|
||||
- name: Install batman-adv
|
||||
shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && make && make install
|
||||
# shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && git apply 1001-batman-adv-introduce-no_rebroadcast-option.patch && make && make install
|
||||
|
Loading…
Reference in New Issue
Block a user