Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-25 01:33:21 -05:00
Code Issues Projects Releases Packages Wiki Activity

Merge ab98da957c into ec11679514

Browse source
This commit is contained in:
raja-grewal 2025-11-23 16:41:02 +00:00 • committed by GitHub
commit 1f1d2b5bee
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -132,8 +132,8 @@ configuration file and significant hardening is applied to a myriad of component
- Disable TCP timestamps as they can allow detecting the system time.
- Optional - Log packets with impossible source or destination addresses to
enable further inspection and analysis.
- Log packets with impossible source or destination addresses to enable further
inspection and analysis.
- Optional - Enable IPv6 Privacy Extensions.

2
usr/lib/sysctl.d/990-security-misc.conf#security-misc-shared
View file

@ -576,7 +576,7 @@ net.ipv4.tcp_timestamps=0
##
## The logging of martian packets is currently disabled.
##
#net.ipv4.conf.*.log_martians=1
net.ipv4.conf.*.log_martians=1
## Enable IPv6 Privacy Extensions to prefer temporary addresses over public addresses.
## The temporary/privacy address is used as the source for all outgoing traffic.