- Conntrack changes (net.netfilter.nf_conntrack_max=262144 and 65536 hashsize)
- Disabled no_rebroadcast-option.patch
This commit is contained in:
		
							parent
							
								
									d02f11434f
								
							
						
					
					
						commit
						c23adcc664
					
				@ -56,8 +56,8 @@ sleep 5
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
# Fixing the nf_conntrack … dropping packets error
 | 
					# Fixing the nf_conntrack … dropping packets error
 | 
				
			||||||
# hashsize = nf_conntrack_max / 4
 | 
					# hashsize = nf_conntrack_max / 4
 | 
				
			||||||
sysctl -w net.netfilter.nf_conntrack_max=131072
 | 
					sysctl -w net.netfilter.nf_conntrack_max=262144
 | 
				
			||||||
echo 32768 > /sys/module/nf_conntrack/parameters/hashsize
 | 
					echo 65536 > /sys/module/nf_conntrack/parameters/hashsize
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Against Denial of Service attacks from internal network
 | 
					# Against Denial of Service attacks from internal network
 | 
				
			||||||
# Check with: sysctl -a | grep conntrack | grep timeout
 | 
					# Check with: sysctl -a | grep conntrack | grep timeout
 | 
				
			||||||
 | 
				
			|||||||
@ -9,7 +9,7 @@
 | 
				
			|||||||
  user: root
 | 
					  user: root
 | 
				
			||||||
  gather_facts: False
 | 
					  gather_facts: False
 | 
				
			||||||
  vars:
 | 
					  vars:
 | 
				
			||||||
    snversion: master_v3.0.0
 | 
					    snversion: master_v3.0.1
 | 
				
			||||||
    batmanversion: v2015.2
 | 
					    batmanversion: v2015.2
 | 
				
			||||||
    common_required_packages:
 | 
					    common_required_packages:
 | 
				
			||||||
      - git
 | 
					      - git
 | 
				
			||||||
@ -130,9 +130,9 @@
 | 
				
			|||||||
           dest=/tmp/batman-adv
 | 
					           dest=/tmp/batman-adv
 | 
				
			||||||
      when: aptupdates.changed
 | 
					      when: aptupdates.changed
 | 
				
			||||||
      register: getbatman
 | 
					      register: getbatman
 | 
				
			||||||
    - name: Get batman-adv no rebrotcast patch
 | 
					#    - name: Get batman-adv no rebrotcast patch
 | 
				
			||||||
      get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
 | 
					#      get_url: url=http://map.freifunk-moehne.de/stuff/1001-batman-adv-introduce-no_rebroadcast-option.patch dest=/tmp/batman-adv/1001-batman-adv-introduce-no_rebroadcast-option.patch
 | 
				
			||||||
      when: getbatman.changed
 | 
					#      when: getbatman.changed
 | 
				
			||||||
    - name: Install batman-adv
 | 
					    - name: Install batman-adv
 | 
				
			||||||
      shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && make && make install
 | 
					      shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && make && make install
 | 
				
			||||||
#      shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && git apply 1001-batman-adv-introduce-no_rebroadcast-option.patch && make && make install
 | 
					#      shell: cd /tmp/batman-adv && git checkout {{ batmanversion }} && git apply 1001-batman-adv-introduce-no_rebroadcast-option.patch && make && make install
 | 
				
			||||||
 | 
				
			|||||||
		Loading…
	
		Reference in New Issue
	
	Block a user