Update tcp_hardening.conf

This commit is contained in:
madaidan 2019-05-16 16:33:03 +00:00 committed by GitHub
parent e6794721bd
commit b814f338b8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -3,10 +3,6 @@
# Protects against time-wait assassination. It drops RST packets for sockets in the time-wait state.
net.ipv4.tcp_rfc1337=1
# Enables source validation of packets and protects against IP spoofing methods.
net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.all.rp_filter=1
# Disables ICMP redirect acceptance.
net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.default.accept_redirects=0