sysctl.conf

#!/sbin/sysctl -f
ddb.onpanic?=0
 
# hardening flags
security.curtain=1
 
security.pax.mprotect.global=1
security.pax.mprotect.enabled=1
 
security.pax.aslr.global=1
security.pax.aslr.enabled=1
 
vm.swap_encrypt=1
 
net.inet.ip.sourceroute=0
net.inet.ip.forwsrcrt=0
 
net.inet.ip.forwarding=0
net.inet6.ip6.forwarding=0
 
# remove sack cause its horrible
net.inet.tcp.sack.enable=0