mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-12-02 08:06:06 -05:00
Merge remote-tracking branch 'raja/bad_ipv6_ra' into arraybolt3/trixie
This commit is contained in:
commit
29639fe69e
2 changed files with 12 additions and 3 deletions
|
|
@ -124,8 +124,9 @@ configuration file and significant hardening is applied to a myriad of component
|
|||
- Disable source routing which allows users to redirect network traffic that
|
||||
can result in man-in-the-middle attacks.
|
||||
|
||||
- Do not accept IPv6 router advertisements and solicitations.
|
||||
|
||||
- Do not accept IPv6 router advertisements (RAs) and solicitations which can result
|
||||
in both man-in-the-middle and denial-of-service attacks.
|
||||
|
||||
- Optional - Disable SACK and DSACK as they have historically been a known
|
||||
vector for exploitation.
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue