securite_kernel
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
securite_kernel [2024/05/05 07:27] 3.14.80.45 old revision restored (2021/01/31 20:19) |
securite_kernel [2024/06/01 14:14] (current) 18.223.125.96 old revision restored (2024/04/30 20:25) |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| Options kernels à utiliser pour restreindre des comportements de routage, ICMP... inutiles à proposer. | Options kernels à utiliser pour restreindre des comportements de routage, ICMP... inutiles à proposer. | ||
| - | Backuper le fichier original mais ne pas le modifier. | ||
| < | < | ||
| cp -p sysctl.conf sysctl.conf.orig | cp -p sysctl.conf sysctl.conf.orig | ||
| Line 11: | Line 10: | ||
| < | < | ||
| - | vi /etc/sysctl.d/custom.conf | + | vi / |
| </ | </ | ||
| Line 18: | Line 17: | ||
| net.ipv4.conf.all.rp_filter = 1 | net.ipv4.conf.all.rp_filter = 1 | ||
| net.ipv4.tcp_syncookies = 1 | net.ipv4.tcp_syncookies = 1 | ||
| - | net.ipv4.ip_forward = 1 #Inclus la ligne suivante : net.ipv4.conf.docker0.forwarding = 1 | + | net.ipv4.ip_forward = 0 #Inclus la ligne suivante : net.ipv4.conf.docker0.forwarding = 0 |
| net.ipv6.conf.all.forwarding=0 | net.ipv6.conf.all.forwarding=0 | ||
| net.ipv4.conf.all.accept_redirects = 0 | net.ipv4.conf.all.accept_redirects = 0 | ||
securite_kernel.1714894024.txt.gz · Last modified: 2024/05/05 07:27 by 3.14.80.45
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
