<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>x83.net &#187; sysctl</title>
	<atom:link href="http://www.x83.net/tag/sysctl/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.x83.net</link>
	<description></description>
	<lastBuildDate>Tue, 31 Jan 2012 13:53:33 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Fix Apache &#8211; No space left on device: Couldn&#8217;t create accept lock</title>
		<link>http://www.x83.net/fix-apache-no-space-left-on-device-couldnt-create-accept-lock/</link>
		<comments>http://www.x83.net/fix-apache-no-space-left-on-device-couldnt-create-accept-lock/#comments</comments>
		<pubDate>Tue, 23 Jun 2009 09:02:01 +0000</pubDate>
		<dc:creator>Giany</dc:creator>
				<category><![CDATA[Centos]]></category>
		<category><![CDATA[Debian]]></category>
		<category><![CDATA[Fedora]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Redhat]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[awk]]></category>
		<category><![CDATA[http]]></category>
		<category><![CDATA[httpd.conf]]></category>
		<category><![CDATA[ipcrm]]></category>
		<category><![CDATA[ipcs]]></category>
		<category><![CDATA[kernel.sem]]></category>
		<category><![CDATA[perl]]></category>
		<category><![CDATA[reboot]]></category>
		<category><![CDATA[semaphores]]></category>
		<category><![CDATA[sslmutex]]></category>
		<category><![CDATA[sysctl]]></category>
		<category><![CDATA[xargs]]></category>

		<guid isPermaLink="false">http://www.x83.net/?p=276</guid>
		<description><![CDATA[This issue is related to semaphores. To view how many semaphores you have use: root@hal [~]# sysctl -a &#124; egrep kernel.sem\&#124;kernel.msgmni kernel.sem = 250 32000 32 128 kernel.msgmni = 16 You can change this values by adding them in /etc/sysctl.conf and then using sysctl -p to activate them. There is no need to reboot. To [...]]]></description>
			<content:encoded><![CDATA[<p>This issue is related to semaphores. To view how many semaphores you have use:</p>
<blockquote><p>root@hal [~]# sysctl -a | egrep kernel.sem\|kernel.msgmni<br />
kernel.sem = 250        32000   32      128<br />
<strong>kernel.msgmni = 16</strong>
</p></blockquote>
<p>You can change this values by adding them in /etc/sysctl.conf and then using sysctl -p to activate them.<br />
There is no need to reboot.</p>
<p>To remove sempahores use either one of these commands:</p>
<blockquote><p>for i in `ipcs -s | grep nobody | awk &#8216;{print $2}&#8217;`; do ipcrm -s $i; done<br />
/scripts/restartsrv_httpd</p></blockquote>
<p><strong>or in Perl</strong></p>
<blockquote><p>ipcs -s | grep nobody | perl -e &#8216;while (<STDIN>) { @a=split(/\s+/); print `ipcrm sem $a[1]`}&#8217;</p></blockquote>
<p><strong>or with xargs</strong></p>
<blockquote><p>ipcs -s | grep nobody | awk &#8216; { print $2 } &#8216; | xargs ipcrm</p></blockquote>
<p><strong>or bash style</strong></p>
<blockquote><p>for ipsemId in $(ipcs -s | grep nobody | cut -f 2 -d &#8216; &#8216;); do ipcrm $ipsemId;done </p></blockquote>
<p>Other errors :</p>
<p><em>Cannot create SSLMutex</em></p>
<p>add in httpd.conf</p>
<p><em>SSLMutex sem</em></p>
]]></content:encoded>
			<wfw:commentRss>http://www.x83.net/fix-apache-no-space-left-on-device-couldnt-create-accept-lock/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Sysctl Linux</title>
		<link>http://www.x83.net/sysctl-linux/</link>
		<comments>http://www.x83.net/sysctl-linux/#comments</comments>
		<pubDate>Sat, 13 Jun 2009 19:58:25 +0000</pubDate>
		<dc:creator>Giany</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[net.ipv4]]></category>
		<category><![CDATA[rp_filter]]></category>
		<category><![CDATA[sysctl]]></category>
		<category><![CDATA[ttl]]></category>

		<guid isPermaLink="false">http://www.x83.net/blog/?p=121</guid>
		<description><![CDATA[net.ipv4.tcp_ecn = 0 net.ipv4.conf.default.rp_filter = 1 #kernel.sysrq = 1 kernel.core_uses_pid = 1 net.ipv4.conf.default.rp_filter = 0 net.ipv4.conf.all.rp_filter = 0 net.ipv4.conf.eth0.rp_filter = 0 net.ipv4.neigh.default.gc_thresh1 = 65535 net.ipv4.neigh.default.gc_thresh2 = 65535 net.ipv4.neigh.default.gc_thresh3 = 65535 kernel.core_uses_pid = 1 #Default ttl net.ipv4.ip_default_ttl = 255 #No uptime net.ipv4.tcp_timestamps=0 #Forwarding net.ipv4.ip_forward = 1 net.ipv4.tcp_ecn = 0 net.ipv4.conf.default.rp_filter = 1 kernel.core_uses_pid = 1 #Connection [...]]]></description>
			<content:encoded><![CDATA[<pre>
net.ipv4.tcp_ecn = 0
net.ipv4.conf.default.rp_filter = 1
#kernel.sysrq = 1
kernel.core_uses_pid = 1

net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.eth0.rp_filter = 0

net.ipv4.neigh.default.gc_thresh1 = 65535
net.ipv4.neigh.default.gc_thresh2 = 65535
net.ipv4.neigh.default.gc_thresh3 = 65535

kernel.core_uses_pid = 1
#Default ttl
net.ipv4.ip_default_ttl = 255

#No uptime
net.ipv4.tcp_timestamps=0

#Forwarding
net.ipv4.ip_forward = 1

net.ipv4.tcp_ecn = 0
net.ipv4.conf.default.rp_filter = 1
kernel.core_uses_pid = 1

#Connection max numer
net.ipv4.ip_conntrack_max = 65535

#Against DDOS //6169=0x1819
net.ipv4.icmp_ratelimit=0
net.ipv4.icmp_ratemask=6169

#Disabling of ICMP echo-reply directed to Broadcast addresses // against scanning
net.ipv4.icmp_echo_ignore_broadcasts=1
</pre>
]]></content:encoded>
			<wfw:commentRss>http://www.x83.net/sysctl-linux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

