Prevent Syn flood attack on Fedora 19

view full story

http://forums.fedoraforum.org – Hi I was looking into the mitigation ways for these attacks and found the modifying kernel method and allowing syn cookies, change no of retries etc. My question is if we all know these things can help against attacks then why cant new kernel versions have these modifications done by default ? I also notice that that they have moved the /etc/sysctl.conf file from Fedora 18 onwards (I think). Does this mean that, the protection is already added by default OR we just have to edit some other file now and do it manually ? Thank You (HowTos)