Kernel 5.15.78 TCP syncookie enabled
November 11, 2022 —
BarryK
For a very long time, like forever, the firewall in EasyOS has complained about "TCP syncookie" not supported. I found that it is a missing kernel configuration, so has compiled the 5.15.78 kernel with this enabled:
> Networking support > Networking options
│ ┌─────────^(-)───────────────────────────────────────────────────────────────────────────┐ │
│ │ [*] IP: broadcast GRE over IP │ │
│ │ [ ] IP: multicast routing │ │
│ │ [*] IP: TCP syncookie support CONFIG_SYN_COOKIES │ │
│ │ < > Virtual (secure) IP: tunneling │ │
The firewall also complained about iptables "state" not supported, or something like that. Fixed, see commit:
https://github.com/bkauler/woofq/commit/c0a2b74b83156f384b1b3a43023b665a62e6a272
...at least, it seems to be fixed.
Tags: easy