diff --git a/etc/sysctl.d/tcp_sack.conf b/etc/sysctl.d/tcp_sack.conf
index 6245fff..f949105 100644
--- a/etc/sysctl.d/tcp_sack.conf
+++ b/etc/sysctl.d/tcp_sack.conf
@@ -1,2 +1,5 @@
 # Disables SACK as it is commonly exploited and likely not needed.
+# https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109
 net.ipv4.tcp_sack=0
+net.ipv4.tcp_dsack=0
+net.ipv4.tcp_fack=0