linux_hardening_guide:sysctl
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
linux_hardening_guide:sysctl [2025/05/31 15:17] – peter | linux_hardening_guide:sysctl [2025/05/31 15:19] (current) – peter | ||
---|---|---|---|
Line 191: | Line 191: | ||
These enable source validation of packets received from all interfaces of the machine. | These enable source validation of packets received from all interfaces of the machine. | ||
- | * This protects against IP spoofing, in which an attacker sends a packet with a fraudulent IP address. | + | * This protects against |
---- | ---- | ||
Line 206: | Line 206: | ||
</ | </ | ||
- | These disable ICMP redirect acceptance and sending to prevent man-in-the-middle attacks and minimize information disclosure. | + | These disable ICMP redirect acceptance and sending to prevent |
---- | ---- |
linux_hardening_guide/sysctl.1748704646.txt.gz · Last modified: 2025/05/31 15:17 by peter