mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-15 18:29:44 +07:00
Code Issues Packages Projects Releases Wiki Activity

Update tcp_hardening.conf

Browse Source
This commit is contained in:
madaidan
2019-05-16 16:33:03 +00:00
committed by GitHub
parent e6794721bd
commit b814f338b8
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
etc/sysctl.d/tcp_hardening.conf
View File

@ -3,10 +3,6 @@
# Protects against time-wait assassination. It drops RST packets for sockets in the time-wait state. # Protects against time-wait assassination. It drops RST packets for sockets in the time-wait state.
net.ipv4.tcp_rfc1337=1 net.ipv4.tcp_rfc1337=1
# Enables source validation of packets and protects against IP spoofing methods.
net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.all.rp_filter=1
# Disables ICMP redirect acceptance. # Disables ICMP redirect acceptance.
net.ipv4.conf.all.accept_redirects=0 net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.default.accept_redirects=0 net.ipv4.conf.default.accept_redirects=0