site  contact  subhomenews

Kernel 5.15.78 TCP syncookie enabled

November 11, 2022 — BarryK

For a very long time, like forever, the firewall in EasyOS has complained about "TCP syncookie" not supported. I found that it is a missing kernel configuration, so has compiled the 5.15.78 kernel with this enabled:

> Networking support > Networking options 
│ ┌─────────^(-)───────────────────────────────────────────────────────────────────────────┐ │
│ │ [*] IP: broadcast GRE over IP │ │
│ │ [ ] IP: multicast routing │ │
│ │ [*] IP: TCP syncookie support CONFIG_SYN_COOKIES │ │
│ │ < > Virtual (secure) IP: tunneling │ │

The firewall also complained about iptables "state" not supported, or something like that. Fixed, see commit:

https://github.com/bkauler/woofq/commit/c0a2b74b83156f384b1b3a43023b665a62e6a272

...at least, it seems to be fixed.    

Tags: easy