Merge remote-tracking branch 'raja/bad_ipv6_ra' into arraybolt3/trixie

This commit is contained in:
Aaron Rainbolt 2025-10-15 19:01:08 -05:00
commit 29639fe69e
No known key found for this signature in database
GPG key ID: A709160D73C79109
2 changed files with 12 additions and 3 deletions

View file

@ -124,8 +124,9 @@ configuration file and significant hardening is applied to a myriad of component
- Disable source routing which allows users to redirect network traffic that
can result in man-in-the-middle attacks.
- Do not accept IPv6 router advertisements and solicitations.
- Do not accept IPv6 router advertisements (RAs) and solicitations which can result
in both man-in-the-middle and denial-of-service attacks.
- Optional - Disable SACK and DSACK as they have historically been a known
vector for exploitation.