I am looking through a linuxsecurity.com quick reference guide and in it, it recommends some kernel configuration options through the /proc pseudo-filesystem. In particular, there are in /proc/sys/net/ipv4 (such things as icmp_echo_ignore_all and tcp_syncookies). However, I don't see that directory on Slackware. Is there an equivalent proc directory that would have those settings?

I've got that directory in Slack 9.0. I think whether or not it exists depends on the configuration of your kernel.

Enjoy!
--- Cerbere

[edit] Oh, BTW I'm still running 2.4.22 [/edit]

Happen to know where in slack 10.0 / latest 2.6.x kernel this may be?

Can't tell where the option is buried, but you have to add proc file system support to your kernel.

BTW, you can then add support for procfs config info, meaning that you can ask the proc pseudo file system for information on the configuration of your currently running kernel. Which is nice, at times, especially, if you are experimenting with multiple kernels, and don't remember what exactly you have booted with... ;-)

gargamel

Yes you should configure your kernel with CONFIG_SYSCTL=y and CONFIG_PROC_FS=y at the minimum but maybe some other options for netfilter are missing too.

I have procfs support but not sysctl support in my kernel. I still don't have a /proc/sys/net/ipv4 directory, though.

Ah nevermind, this explains why...

" Setting kernel parameters in the /proc/sys directory need not be a manual process or one that required echoing values into a virtual file, hoping they are correct. The sysctl command can make viewing, setting, and automating special kernel settings very easy.

To get a quick overview of all settings configurable in the /proc/sys directory, type the sysctl -a command as root. This will create a large, comprehensive list, a small portion of which looks something like this:

net.ipv4.route.min_delay = 2
kernel.sysrq = 0
kernel.sem = 250 32000 32 128

This is the same basic information you would see if you viewed each of the files individually. The only difference is the file location. The /proc/sys/net/ipv4/route/min_delay is signified by net.ipv4.route.min_delay, with the directory slashes replaced by dots and the proc.sys portion assumed. "

That is for redhat but I assume it's similar in Slackware.