Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-13 12:31:20 -05:00
Code Issues Packages Projects Releases Wiki Activity

Set net.ipv4.conf.*.drop_gratuitous_arp=1

Browse Source
This commit is contained in:
raja-grewal 2024-12-19 10:35:08 +00:00 committed by GitHub
parent 95b535764c
commit 2e6e1701a0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -111,8 +111,8 @@ Networking:
- Optional - Respond to ARP requests only if the target IP address is - Optional - Respond to ARP requests only if the target IP address is
on-link, preventing some IP spoofing attacks. on-link, preventing some IP spoofing attacks.
- Optional - Drop gratuitous ARP packets to prevent ARP cache poisoning - Drop gratuitous ARP packets to prevent ARP cache poisoning via
via man-in-the-middle and denial-of-service attacks. man-in-the-middle and denial-of-service attacks.
- Ignore ICMP echo requests to prevent clock fingerprinting and Smurf attacks. - Ignore ICMP echo requests to prevent clock fingerprinting and Smurf attacks.

2
usr/lib/sysctl.d/990-security-misc.conf
View File

@ -482,7 +482,7 @@ net.ipv6.conf.*.accept_redirects=0
## https://patchwork.ozlabs.org/project/netdev/patch/1428652454-1224-3-git-send-email-johannes@sipsolutions.net/ ## https://patchwork.ozlabs.org/project/netdev/patch/1428652454-1224-3-git-send-email-johannes@sipsolutions.net/
## https://www.practicalnetworking.net/series/arp/gratuitous-arp/ ## https://www.practicalnetworking.net/series/arp/gratuitous-arp/
## ##
#net.ipv4.conf.*.drop_gratuitous_arp=1 net.ipv4.conf.*.drop_gratuitous_arp=1
## Ignore ICMP echo requests. ## Ignore ICMP echo requests.
## Prevents clock fingerprinting through ICMP timestamps and Smurf attacks. ## Prevents clock fingerprinting through ICMP timestamps and Smurf attacks.