Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-05 04:14:59 -04:00
Code Issues Projects Releases Packages Wiki Activity

Provide option to harden response to ARP requests

Browse source
This commit is contained in:
raja-grewal 2024-11-13 05:41:25 +00:00 • committed by GitHub
parent a25d4f8df8
commit 18aec201bf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
usr/lib/sysctl.d/990-security-misc.conf
View file

@ -452,6 +452,13 @@ net.ipv6.conf.*.accept_redirects=0
##
#net.ipv4.conf.*.arp_filter=1
## Respond to ARP (Address Resolution Protocol) requests only if the target IP address is on-link.
## Reduces IP spoofing attacks by limiting the scope of allowable ARP responses.
##
## https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf
##
#net.ipv4.conf.*.arp_ignore=2
## Drop gratuitous ARP (Address Resolution Protocol) packets.
## Stops ARP responses sent by a device without being explicitly requested.
## Prevents ARP cache poisoning by rejecting fake ARP entries into a network.