This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
securite_kernel [2025/04/27 02:26] 20.171.207.41 old revision restored (2025/04/19 02:36) |
securite_kernel [2025/04/28 11:30] (current) 114.119.150.140 old revision restored (2025/03/10 19:24) |
||
---|---|---|---|
Line 3: | Line 3: | ||
Options kernels à utiliser pour restreindre des comportements de routage, ICMP... inutiles à proposer. | Options kernels à utiliser pour restreindre des comportements de routage, ICMP... inutiles à proposer. | ||
+ | Backuper le fichier original mais ne pas le modifier. | ||
< | < | ||
cp -p sysctl.conf sysctl.conf.orig | cp -p sysctl.conf sysctl.conf.orig | ||
Line 10: | Line 11: | ||
< | < | ||
- | vi / | + | vi /etc/sysctl.d/custom.conf |
</ | </ | ||
Line 17: | Line 18: | ||
net.ipv4.conf.all.rp_filter = 1 | net.ipv4.conf.all.rp_filter = 1 | ||
net.ipv4.tcp_syncookies = 1 | net.ipv4.tcp_syncookies = 1 | ||
- | net.ipv4.ip_forward = 0 #Inclus la ligne suivante : net.ipv4.conf.docker0.forwarding = 0 | + | net.ipv4.ip_forward = 1 #Inclus la ligne suivante : net.ipv4.conf.docker0.forwarding = 1 |
net.ipv6.conf.all.forwarding=0 | net.ipv6.conf.all.forwarding=0 | ||
net.ipv4.conf.all.accept_redirects = 0 | net.ipv4.conf.all.accept_redirects = 0 |