/etc/sysctl.conf


# NEXT LINE UNCOMMENTED TO ALLOW NAT
net.inet.ip.forwarding=1 # 1=Permit forwarding (routing)
  # of packets
#net.inet6.ip6.forwarding=1 # 1=Permit forwarding (routing) of packets
#net.inet6.ip6.accept_rtadv=1 # 1=Permit IPv6 autoconf (forwarding must be 0)
#net.inet.tcp.rfc1323=0 # 0=disable TCP RDC1323 extensions (for if tcp is slow)
#net.inet.esp.enable=1 # 1=Enable the ESP IPSec protocol
#net.inet.ah.enable=1 # 1=Enable the AH IPSec protocol
#ddb.panic=0 # 0=Do not drop into ddb on a kernel panic
#ddb.console=1 # 1=Permit entry of ddb from the console
#fs.posix.setuid=0 # 0=Traditional BSD chown() semantics
#vm.swapencrypt=1 # 1=Encrypt pages that go to swap
#net.inet.ip.ipsec-acl=0 # 0=disable IPsec ingress ACL checking
#machdep.allowaperture=1 # 1=permit access to aperture driver (XFree86)
#machdep.apmwarn=10 # battery % when apm status messages enabled

LEGEND
Red hardware dependent
Purple variable (user choice)
Black same for everyone
Green dependent on outside circumstances (e.g. ISP)