Consider disabling syncookies

[ArrayBolt3]

/usr/lib/sysctl.d/990-security-misc.conf#security-misc-shared currently has this:

## Enable TCP SYN cookie protection to assist against SYN flood attacks.
##
## https://en.wikipedia.org/wiki/SYN_flood
## https://cateee.net/lkddb/web-lkddb/SYN_COOKIES.html
##
## KSPP=yes
## KSPP sets CONFIG_SYN_COOKIES=y.
##
net.ipv4.tcp_syncookies=1

Syncookies rely on embedding special information into into a TCP initial sequence number, which tirdad completely destroys.

[ArrayBolt3]

This may not be correct after all, see 0xsirus/tirdad#34 (comment)

[ArrayBolt3]

We may want to disable this anyway though, 0xsirus/tirdad#34 (comment)

[0xsirus]

This option can be enabled with 1 or 2.
1 means activate only when queue is full and 2 means always on. 1 which is the default can be worse as it creates the possibility of forced-fallback attacks which can assist with fingerprinting.