sysctl.conf 2.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960
  1. #
  2. # /etc/sysctl.conf - Configuration file for setting system variables
  3. # See /etc/sysctl.d/ for additional system variables
  4. # See sysctl.conf (5) for information.
  5. #
  6. #kernel.domainname = example.com
  7. # Uncomment the following to stop low-level messages on console
  8. #kernel.printk = 3 4 1 3
  9. ##############################################################3
  10. # Functions previously found in netbase
  11. #
  12. # Uncomment the next two lines to enable Spoof protection (reverse-path filter)
  13. # Turn on Source Address Verification in all interfaces to
  14. # prevent some spoofing attacks
  15. #net.ipv4.conf.default.rp_filter=1
  16. #net.ipv4.conf.all.rp_filter=1
  17. # Uncomment the next line to enable TCP/IP SYN cookies
  18. # See http://lwn.net/Articles/277146/
  19. # Note: This may impact IPv6 TCP sessions too
  20. #net.ipv4.tcp_syncookies=1
  21. # Uncomment the next line to enable packet forwarding for IPv4
  22. #net.ipv4.ip_forward=1
  23. # Uncomment the next line to enable packet forwarding for IPv6
  24. # Enabling this option disables Stateless Address Autoconfiguration
  25. # based on Router Advertisements for this host
  26. #net.ipv6.conf.all.forwarding=1
  27. ###################################################################
  28. # Additional settings - these settings can improve the network
  29. # security of the host and prevent against some network attacks
  30. # including spoofing attacks and man in the middle attacks through
  31. # redirection. Some network environments, however, require that these
  32. # settings are disabled so review and enable them as needed.
  33. #
  34. # Do not accept ICMP redirects (prevent MITM attacks)
  35. #net.ipv4.conf.all.accept_redirects = 0
  36. #net.ipv6.conf.all.accept_redirects = 0
  37. # _or_
  38. # Accept ICMP redirects only for gateways listed in our default
  39. # gateway list (enabled by default)
  40. # net.ipv4.conf.all.secure_redirects = 1
  41. #
  42. # Do not send ICMP redirects (we are not a router)
  43. #net.ipv4.conf.all.send_redirects = 0
  44. #
  45. # Do not accept IP source route packets (we are not a router)
  46. #net.ipv4.conf.all.accept_source_route = 0
  47. #net.ipv6.conf.all.accept_source_route = 0
  48. #
  49. # Log Martian Packets
  50. #net.ipv4.conf.all.log_martians = 1
  51. #