SHARE
TWEET

/etc/sysctl.conf

a guest Dec 1st, 2016 199 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #
  2. # /etc/sysctl.conf - Configuration file for setting system variables
  3. # See /etc/sysctl.d/ for additional system variables.
  4. # See sysctl.conf (5) for information.
  5. #
  6.  
  7. #kernel.domainname = example.com
  8.  
  9. # Uncomment the following to stop low-level messages on console
  10. #kernel.printk = 3 4 1 3
  11.  
  12. ##############################################################3
  13. # Functions previously found in netbase
  14. #
  15.  
  16. # Uncomment the next two lines to enable Spoof protection (reverse-path filter)
  17. # Turn on Source Address Verification in all interfaces to
  18. # prevent some spoofing attacks
  19. #net.ipv4.conf.default.rp_filter=1
  20. #net.ipv4.conf.all.rp_filter=1
  21.  
  22. # Uncomment the next line to enable TCP/IP SYN cookies
  23. # See http://lwn.net/Articles/277146/
  24. # Note: This may impact IPv6 TCP sessions too
  25. #net.ipv4.tcp_syncookies=1
  26.  
  27. # Uncomment the next line to enable packet forwarding for IPv4
  28. #net.ipv4.ip_forward=1
  29.  
  30. # Uncomment the next line to enable packet forwarding for IPv6
  31. #  Enabling this option disables Stateless Address Autoconfiguration
  32. #  based on Router Advertisements for this host
  33. #net.ipv6.conf.all.forwarding = 1
  34. #net.ipv6.conf.all.proxy_ndp = 1
  35. #net.ipv6.conf.all.accept_ra = 1
  36. #net.ipv6.bindv6only = 1
  37. #net.ipv6.conf.all.autoconf = 0
  38. #net.ipv6.conf.default.autoconf = 0
  39. #net.ipv6.conf.vmbr0.autoconf = 0
  40. #net.ipv6.conf.vmbr0.accept_ra=2
  41. ###################################################################
  42. # Additional settings - these settings can improve the network
  43. # security of the host and prevent against some network attacks
  44. # including spoofing attacks and man in the middle attacks through
  45. # redirection. Some network environments, however, require that these
  46. # settings are disabled so review and enable them as needed.
  47. #
  48. # Do not accept ICMP redirects (prevent MITM attacks)
  49. #net.ipv4.conf.all.accept_redirects = 0
  50. #net.ipv6.conf.all.accept_redirects = 0
  51. # _or_
  52. # Accept ICMP redirects only for gateways listed in our default
  53. # gateway list (enabled by default)
  54. # net.ipv4.conf.all.secure_redirects = 1
  55. #
  56. # Do not send ICMP redirects (we are not a router)
  57. #net.ipv4.conf.all.send_redirects = 0
  58. #
  59. # Do not accept IP source route packets (we are not a router)
  60. #net.ipv4.conf.all.accept_source_route = 0
  61. #net.ipv6.conf.all.accept_source_route = 0
  62. #
  63. # Log Martian Packets
  64. #net.ipv4.conf.all.log_martians = 1
  65. #
  66. net.ipv4.conf.all.rp_filter=1
  67. net.ipv4.icmp_echo_ignore_broadcasts=1
  68. net.ipv4.conf.default.forwarding=1
  69. net.ipv4.conf.default.proxy_arp = 0
  70. net.ipv4.ip_forward=1
  71. kernel.sysrq = 1
  72. net.ipv4.conf.default.send_redirects = 1
  73. net.ipv4.conf.all.send_redirects = 0
  74. net.ipv4.conf.eth0.proxy_arp=1
  75. #net.ipv4.conf.vmbr0.proxy_arp=1
  76. # IPV6
  77. # IPv6
  78. #net.ipv6.conf.default.forwarding=1
  79. net.ipv6.conf.all.forwarding=1
  80. #net.ipv6.conf.default.proxy_ndp=1
  81. #net.ipv6.conf.all.proxy_ndp=1
  82. # ONLINE IPv6
  83. net.ipv6.conf.all.accept_ra = 2
  84. net.ipv6.conf.all.accept_ra_defrtr = 1
  85. net.ipv6.conf.all.accept_ra_from_local = 0
  86. net.ipv6.conf.all.accept_ra_min_hop_limit = 1
  87. net.ipv6.conf.all.accept_ra_mtu = 1
  88. net.ipv6.conf.all.accept_ra_pinfo = 1
  89. net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
  90. net.ipv6.conf.all.accept_ra_rtr_pref = 1
  91. #My stuff:
  92. net.ipv6.bindv6only = 1
  93. #net.ipv6.conf.vmbr0.accept_ra = 2
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top