Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3aef0fd9 authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller
Browse files

[NETFILTER]: nf_conntrack_tcp: make sysctl variables static 



sysctls are registered by the protocol module itself since 2.6.19, no need
to have them visible to others.

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 138939e0

net/netfilter/nf_conntrack_proto_tcp.c

+3 −3
Original line number Original line Diff line number Diff line
@@ -58,16 +58,16 @@ static DEFINE_RWLOCK(tcp_lock); 
/* "Be conservative in what you do,

/* "Be conservative in what you do,

    be liberal in what you accept from others."

    be liberal in what you accept from others."

    If it's non-zero, we mark only out of window RST segments as INVALID. */

    If it's non-zero, we mark only out of window RST segments as INVALID. */

int nf_ct_tcp_be_liberal __read_mostly = 0;

static int nf_ct_tcp_be_liberal __read_mostly = 0;





/* If it is set to zero, we disable picking up already established

/* If it is set to zero, we disable picking up already established

   connections. */

   connections. */

int nf_ct_tcp_loose __read_mostly = 1;

static int nf_ct_tcp_loose __read_mostly = 1;





/* Max number of the retransmitted packets without receiving an (acceptable)

/* Max number of the retransmitted packets without receiving an (acceptable)

   ACK from the destination. If this number is reached, a shorter timer

   ACK from the destination. If this number is reached, a shorter timer

   will be started. */

   will be started. */

int nf_ct_tcp_max_retrans __read_mostly = 3;

static int nf_ct_tcp_max_retrans __read_mostly = 3;





  /* FIXME: Examine ipfilter's timeouts and conntrack transitions more

  /* FIXME: Examine ipfilter's timeouts and conntrack transitions more

     closely.  They're more complex. --RR */

     closely.  They're more complex. --RR */