Pimping Your Distro Out

[soup4you2]

Ok.. in what ways do you tweak your fbsd distro.. from calls in your sysctl.conf to your rc.conf.. in what ways do you make your os a little faster or better from memmory usage to faster disk access..

[Strog]

There's a good article over at ONLamp that I use for the first go-round on my installs. This gives me a good base until I can come back and tweak it more specifically to the system. http://www.onlamp.com/pub/a/bsd/2002/09/19/FreeBSD_Basics.html

Kernel options:
options CPU_ENABLE_SSE #used by DVD
options USER_LDT #used by many apps
device pcm #used by SoundBlaster

/boot/loader.conf:
hw.ata.atapi_dma="1"

/etc/sysctl.conf:
hw.ata.ata_dma="1"kern.ipc.shmmax=67108864
kern.ipc.shmall=32768
hw.snd.pcm0.vchans=4
hw.snd.maxautovchans=4

[soup4you2]

Sysctl's
[code:1:81f92a65df]
net.inet.tcp.recvspace=65535
net.inet.tcp.sendspace=65535
hw.ata.atapi_dma=1
kern.fallback_elf_brand=3
hw.snd.pcm0.vchans=4
hw.snd.maxautovchans=4
[/code:1:81f92a65df]

Kernalage
[code:1:81f92a65df]
options CPU_ENABLE_SSE
options IPSEC #IP security
options IPSEC_ESP #IP security (crypto; define w/ IPSEC)
options IPSEC_DEBUG #debug for IP security
[/code:1:81f92a65df]

[elmore]

speaking of sysctl option I like to use these on public FBSD boxes.

net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1

stops nmap dead in its tracks. ;)

[soup4you2]

i add in the blackholes also.. some other good ones are:

net.inet.icmp.bmcastecho=
net.inet.icmp.maskrepl=
net.inet.icmp.icmplim=
net.inet.icmp.drop_redirect=
net.inet.icmp.log_redirect=

and my all time favorite

kern.ps_showallprocs=0