mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-08-01 14:26:04 -04:00
Provide option to deny sending and receiving shared media redirects
This commit is contained in:
parent
18aec201bf
commit
141b84c40d
2 changed files with 15 additions and 1 deletions
|
@ -102,12 +102,15 @@ Networking:
|
|||
- Disable ICMP redirect acceptance and redirect sending messages to prevent
|
||||
man-in-the-middle attacks and minimize information disclosure.
|
||||
|
||||
- Optional - Deny sending and receiving shared media redirects to reduce
|
||||
the risk of IP spoofing attacks.
|
||||
|
||||
- Optional - Enable ARP filtering to mitigate some ARP spoofing and ARP
|
||||
cache poisoning attacks.
|
||||
|
||||
- Optional - Respond to ARP requests only if the target IP address is
|
||||
on-link, preventing some IP spoofing attacks.
|
||||
|
||||
|
||||
- Optional - Drop gratuitous ARP packets to prevent ARP cache poisoning
|
||||
via man-in-the-middle and denial-of-service attacks.
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue