lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-20 03:16:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

defaults, more hardened defaults, prevent icmp redirects being send.

Browse Source
This commit is contained in:
Ad Schellevis 2019-02-13 09:57:40 +01:00
parent 7eb9a4f755
commit b424a2f9b3
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/etc/config.xml.sample
View File

@ -203,6 +203,18 @@
<tunable>security.bsd.see_other_uids</tunable>
<value>default</value>
</item>
<item>
<descr><![CDATA[Enable/disable sending of ICMP redirects in response to IP packets for which a better,
and for the sender directly reachable, route and next hop is known.]]>
</descr>
<tunable>net.inet.ip.redirect</tunable>
<value>0</value>
</item>
<item>
<descr><![CDATA[Enable/disable dropping of ICMP Redirect packets]]></descr>
<tunable>net.inet.icmp.drop_redirect</tunable>
<value>1</value>
</item>
</sysctl>
<system>
<optimization>normal</optimization>