From e4117816c54d12bbe61541e514935577b7c728f2 Mon Sep 17 00:00:00 2001
From: CallMeR <9463297+callmer@user.noreply.gitee.com>
Date: Fri, 1 Dec 2023 13:30:52 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20TS=20=E6=B5=8B=E8=AF=95?=
 =?UTF-8?q?=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/debian/debian_ts_99_sysctl.conf  | 16 ++++++
 src/debian/debian_ts_lo_network.conf | 80 ----------------------------
 2 files changed, 16 insertions(+), 80 deletions(-)
 delete mode 100644 src/debian/debian_ts_lo_network.conf

diff --git a/src/debian/debian_ts_99_sysctl.conf b/src/debian/debian_ts_99_sysctl.conf
index 201aa2c..f8cca85 100644
--- a/src/debian/debian_ts_99_sysctl.conf
+++ b/src/debian/debian_ts_99_sysctl.conf
@@ -19,6 +19,12 @@ net.core.netdev_budget_usecs = 20000
 
 net.core.rps_sock_flow_entries = 32768
 
+net.ipv4.conf.all.accept_redirects = 0
+net.ipv4.conf.default.accept_redirects = 0
+
+net.ipv4.conf.all.accept_source_route = 0
+net.ipv4.conf.default.accept_source_route = 0
+
 net.ipv4.conf.all.arp_ignore = 1
 net.ipv4.conf.default.arp_ignore = 1
 
@@ -40,10 +46,20 @@ net.ipv4.tcp_fin_timeout = 30
 net.ipv4.tcp_keepalive_time = 120
 net.ipv4.tcp_syncookies = 1
 
+net.ipv6.conf.all.accept_ra = 0
+net.ipv6.conf.default.accept_ra = 0
+
+net.ipv6.conf.all.accept_redirects = 0
+net.ipv6.conf.default.accept_redirects = 0
+
+net.ipv6.conf.all.accept_source_route = 0
+net.ipv6.conf.default.accept_source_route = 0
+
 net.ipv6.conf.all.use_tempaddr = 0
 net.ipv6.conf.default.use_tempaddr = 0
 
 net.netfilter.nf_conntrack_acct = 1
+net.netfilter.nf_conntrack_checksum = 0
 net.netfilter.nf_conntrack_tcp_timeout_established = 7440
 net.netfilter.nf_conntrack_udp_timeout = 60
 net.netfilter.nf_conntrack_udp_timeout_stream = 180
diff --git a/src/debian/debian_ts_lo_network.conf b/src/debian/debian_ts_lo_network.conf
deleted file mode 100644
index 4c95c35..0000000
--- a/src/debian/debian_ts_lo_network.conf
+++ /dev/null
@@ -1,80 +0,0 @@
-# This configuration file is customized by fox,
-# Optimize lo network for local TS server.
-
-[Match]
-Name=lo
-
-# rfc6890
-[Route]
-Destination=0.0.0.0/8
-Type=unreachable
-[Route]
-Destination=127.0.0.0/8
-Type=unreachable
-[Route]
-Destination=169.254.0.0/16
-Type=unreachable
-[Route]
-Destination=192.0.0.0/24
-Type=unreachable
-[Route]
-Destination=192.0.0.0/29
-Type=unreachable
-[Route]
-Destination=192.0.2.0/24
-Type=unreachable
-[Route]
-Destination=192.88.99.0/24
-Type=unreachable
-[Route]
-Destination=198.18.0.0/15
-Type=unreachable
-[Route]
-Destination=198.51.100.0/24
-Type=unreachable
-[Route]
-Destination=203.0.113.0/24
-Type=unreachable
-[Route]
-Destination=240.0.0.0/4
-Type=unreachable
-[Route]
-Destination=255.255.255.255/32
-Type=unreachable
-[Route]
-Destination=::1/128
-Type=unreachable
-[Route]
-Destination=::/128
-Type=unreachable
-[Route]
-Destination=64:ff9b::/96
-Type=unreachable
-[Route]
-Destination=::ffff:0:0/96
-Type=unreachable
-[Route]
-Destination=100::/64
-Type=unreachable
-[Route]
-Destination=2001::/23
-Type=unreachable
-[Route]
-Destination=2001::/32
-Type=unreachable
-[Route]
-Destination=2001:2::/48
-Type=unreachable
-[Route]
-Destination=2001:db8::/32
-Type=unreachable
-[Route]
-Destination=2001:20::/28
-Type=unreachable
-[Route]
-Destination=2002::/16
-Type=unreachable
-[Route]
-Destination=fe80::/10
-Type=unreachable
-