OpenBSD hardening


Ottimizzazioni (3/4)

net.inet.tcp.rfc1323=1                 # 0=disable TCP RFC1323 extensions
          vm.swapencrypt.enable=1          # 1=Encrypt pages that go to swap
          net.inet.tcp.recvspace=65535     # default recv socket buffer size
          net.inet.tcp.sendspace=65535    # default send socket buffer size


option BUFCACHEPERCENT=30      # filesystem buffer
          option NMBCLUSTERS=8192            # memoria riservata per le operazioni di rete 


abilitare il "soft updates": "/dev/sd0a / ffs rw,softdep 1 1" in /etc/fstab