Public Pastes
daily pastebin goal
5%
SHARE
TWEET

Untitled

Felconian Jun 7th, 2016 40 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Kernel IP routing table
  2. Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
  3. 0.0.0.0         10.0.0.2        0.0.0.0         UG    100    0        0 enp3s0
  4. 10.0.0.0        0.0.0.0         255.255.255.0   U     100    0        0 enp3s0
  5. 169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 enp3s0
  6. ---------
  7. # interfaces(5) file used by ifup(8) and ifdown(8)
  8. auto lo
  9. iface lo inet loopback
  10.  
  11. ---------
  12. #
  13. # Configuration file for setting network variables. Please note these settings
  14. # override /etc/sysctl.conf. If you prefer to use /etc/sysctl.conf, please
  15. # adjust IPT_SYSCTL in /etc/default/ufw.
  16. #
  17.  
  18. # Uncomment this to allow this host to route packets between interfaces
  19. net/ipv4/ip_forward=1
  20. #net/ipv6/conf/default/forwarding=1
  21. #net/ipv6/conf/all/forwarding=1
  22.  
  23. # Turn on Source Address Verification in all interfaces to prevent some
  24. # spoofing attacks
  25. net/ipv4/conf/default/rp_filter=1
  26. net/ipv4/conf/all/rp_filter=1
  27.  
  28. # Do not accept IP source route packets (we are not a router)
  29. net/ipv4/conf/default/accept_source_route=0
  30. net/ipv4/conf/all/accept_source_route=0
  31. net/ipv6/conf/default/accept_source_route=0
  32. net/ipv6/conf/all/accept_source_route=0
  33.  
  34. # Disable ICMP redirects. ICMP redirects are rarely used but can be used in
  35. # MITM (man-in-the-middle) attacks. Disabling ICMP may disrupt legitimate
  36. # traffic to those sites.
  37. net/ipv4/conf/default/accept_redirects=0
  38. net/ipv4/conf/all/accept_redirects=0
  39. net/ipv6/conf/default/accept_redirects=0
  40. net/ipv6/conf/all/accept_redirects=0
  41.  
  42. # Ignore bogus ICMP errors
  43. net/ipv4/icmp_echo_ignore_broadcasts=1
  44. net/ipv4/icmp_ignore_bogus_error_responses=1
  45. net/ipv4/icmp_echo_ignore_all=0
  46.  
  47. # Don't log Martian Packets (impossible packets)
  48. net/ipv4/conf/default/log_martians=0
  49. net/ipv4/conf/all/log_martians=0
  50.  
  51. # Change to '1' to enable TCP/IP SYN cookies This disables TCP Window Scaling
  52. # (http://lkml.org/lkml/2008/2/5/167)
  53. net/ipv4/tcp_syncookies=0
  54.  
  55. #net/ipv4/tcp_fin_timeout=30
  56. #net/ipv4/tcp_keepalive_intvl=1800
  57.  
  58. # normally allowing tcp_sack is ok, but if going through OpenBSD 3.8 RELEASE or
  59. # earlier pf firewall, should set this to 0
  60. net/ipv4/tcp_sack=1
  61.  
  62. # Uncomment this to turn off ipv6 autoconfiguration
  63. #net/ipv6/conf/default/autoconf=0
  64. #net/ipv6/conf/all/autoconf=0
  65.  
  66. # Uncomment this to enable ipv6 privacy addressing
  67. #net/ipv6/conf/default/use_tempaddr=2
  68. #net/ipv6/conf/all/use_tempaddr=2
RAW Paste Data
Top