mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-08-06 05:04:28 -04:00
Merge branch 'Kicksecure:master' into docs
This commit is contained in:
commit
be9308e490
4 changed files with 62 additions and 9 deletions
|
@ -79,9 +79,8 @@ Various networking components of the TCP/IP stack are hardened for IPv4/6.
|
|||
- Enable reverse path filtering (source validation) of packets received
|
||||
from all interfaces to prevent IP spoofing.
|
||||
|
||||
- Disable ICMP redirect acceptance and redirect sending messages to
|
||||
prevent man-in-the-middle attacks and minimize information disclosure. If
|
||||
ICMP redirect messages are permitted, only do so from approved gateways.
|
||||
- Disable ICMP redirect acceptance and redirect sending messages to prevent
|
||||
man-in-the-middle attacks and minimize information disclosure.
|
||||
|
||||
- Ignore ICMP echo requests to prevent clock fingerprinting and Smurf attacks.
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue