TCP weakness identified

[MoonRise]

Ah, OK, I misread that setting and the issue. Makes sense now! Thanks!

[dibl]

FYI:

root@Hibiscus:/# uname -a
Linux Hibiscus 4.7.0-towo.1-siduction-amd64 #1 SMP PREEMPT siduction 4.7-1 (2016-08-01) x86_64 GNU/Linux

root@Hibiscus:/# sysctl net.ipv4.tcp_challenge_ack_limit
net.ipv4.tcp_challenge_ack_limit = 1000

[GreyGeek]

4.7.0 kernel? Running Siduction on the bleeding edge?

[kubicle]

FYI:

root@Hibiscus:/# uname -a
Linux Hibiscus 4.7.0-towo.1-siduction-amd64 #1 SMP PREEMPT siduction 4.7-1 (2016-08-01) x86_64 GNU/Linux

root@Hibiscus:/# sysctl net.ipv4.tcp_challenge_ack_limit
net.ipv4.tcp_challenge_ack_limit = 1000

Yup, 4.7 kernel is patched.

Debian sid still comes with 4.6, does siduction have it's own kernels?

[marco07]

That sort of shows you haven't actually changed the kernel default (100). After editing sysctl.conf you need to run "sudo sysctl -p" to reload the configuration (a reboot will also work, of course)

After editing sysctl.conf, and running sudo sysctl -p, I get the following error mesage:

marco@Lenovo:/etc$ sudo sysctl -p
[sudo] password for marco:
sysctl: cannot stat /proc/sys//net.ipv4/tcp_challenge_ack_limit: No such file or directory

i am running 16.04 fully updated version.

Edited later:
Never mind! corrected a typo and redid. Its working now.
Thanks!