AS201281 Wiki

Your check engine light is on!

User Tools

Site Tools

Trace: • Firewall
gnu_linux_server:network_configuration:firewall

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
gnu_linux_server:network_configuration:firewall [2012/01/28 20:21] – guillaumegnu_linux_server:network_configuration:firewall [2021/01/04 20:41] (current) – external edit 127.0.0.1
Line 158: Line 158:
     iptables -A SPOOFED -s 192.168.0.0/16 -j DROP     iptables -A SPOOFED -s 192.168.0.0/16 -j DROP
     iptables -A SPOOFED -s 10.0.0.0/8     -j DROP     iptables -A SPOOFED -s 10.0.0.0/8     -j DROP
 +
 +    end_debug $?
 +}
 +
 +misc_config() {
 +    print_debug "Misc configurations"
 +
 +    echo 1 > /proc/sys/net/ipv4/tcp_syncookies
 +    echo 0 > /proc/sys/net/ipv4/ip_forward 
 +    echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts 
 +    echo 1 >/proc/sys/net/ipv4/conf/all/log_martians 
 +    echo 1 > /proc/sys/net/ipv4/ip_always_defrag
 +    echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
 +    echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
 +    echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects
 +    echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
  
     end_debug $?     end_debug $?
Line 322: Line 338:
  
     deny_spoofing     deny_spoofing
 +    misc_config
  
     # Starting fail2ban again     # Starting fail2ban again
gnu_linux_server/network_configuration/firewall.1327782070.txt.gz · Last modified: 2021/01/04 20:40 (external edit)