Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-11 14:49:31 -05:00
Code Issues Packages Projects Releases Wiki Activity

Create tcp_hardening.conf

Browse Source
This commit is contained in:
madaidan 2019-05-06 15:45:53 +00:00 committed by GitHub
parent 4216299ee8
commit 2923fc96ef
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
etc/sysctl.d/tcp_hardening.conf Normal file
View File

@ -0,0 +1,23 @@
## TCP/IP stack hardening
# Protects against time-wait assassination. It drops RST packets for sockets in the time-wait state.
net.ipv4.tcp_rfc1337=1
# Enables source validation of packets and protects against IP spoofing methods.
net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.all.rp_filter=1
# Disables ICMP redirect acceptance.
net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.default.accept_redirects=0
net.ipv4.conf.all.secure_redirects=0
net.ipv4.conf.default.secure_redirects=0
net.ipv6.conf.all.accept_redirects=0
net.ipv6.conf.default.accept_redirects=0
# Disables ICMP redirect sending.
net.ipv4.conf.all.send_redirects=0
net.ipv4.conf.default.send_redirects=0
# Ignores ICMP requests
net.ipv4.icmp_echo_ignore_all=1