4

Linux Hardening and /proc Filesystem Question

view full story
linux-howto

https://bbs.archlinux.org – Hello,I reading about Linux hardening, but when it comes to kernel parameters configuration I have a small doubt.Some tutorials tell you to change kernel network options this way:echo 1 > /proc/sys/net/ipv4/conf /all/rp_filterothers, this way:echo 1 > /proc/sys/net/ipv4/conf /default/rp_filterand others tell you to to change both ways:echo 1 > /proc/sys/net/ipv4/conf /all/rp_filterecho 1 > /proc/sys/net/ipv4/conf /default/rp_filterWhat is the difference, and what is the correct way to change kernel network options? tessio https://bbs.archlinux.org/profile.php?id=46084 (HowTos)

Songlist's picture
Submitted by Songlist on 07/26/2012 – Made popular on 07/26/2012

Stories similar to Linux Hardening and /proc Filesystem Question

I have created an alias interface lo:2. How do I disable arp on this interface so that it does not send out ARP replies?

I have several Debian Squeeze (6.0.6 up to date) used as routers. When a link is down, they send ICMP redirects to local hosts. This is the default behaviour of Debian and several others.

Is there any way to start with a larger than default TCP window size on an ubuntu server?

I see there are some parameters in /proc/sys/net/ipv4/ e.g:

/proc/sys/net/ipv4/tcp_window_scaling (which is 1)

/proc/sys/net/ipv4/tcp_adv_win_scale (2)

/proc/sys/net/ipv4/tcp_slow_start_after_idle (1)

/proc/sys/net/ipv4/tcp_window_scaling (1)

On my Ubuntu machine, in /etc/sysctl.conf file, I've got reverse path filtering options commented out by default like this:

#net.ipv4.conf.default.rp_filter=1 #net.ipv4.conf.all.rp_filter=1

but in /etc/sysctl.d/10-network-security.conf they are (again, by default) not commented out:

net.ipv4.conf.default.rp_filter=1 net.ipv4.conf.all.rp_filter=1

So is reverse path filtering enabled or not?

I have to change the smp_affinity of a interrupt permanently.

port redirection through a VPN 1 year 21 weeks ago

I would like redirect my tcp traffic to IRC throught a VPN.

I mark the packets with iptables and create a new route for this packets:

echo 1 > /proc/sys/net/ipv4/ip_forward echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter

iptables -t mangle -A OUTPUT !

Modifying IPv4 headers 3 years 20 weeks ago

Hi,

My query is: I need to set the IPv4 header fields(like TOS, TTL, Precedence and Flags) in the linux kernel using the system calls.

hi all,

my system having two interfaces of 172.16.1.232 and 10.250.41.10 and i am using this to establish tunnel to our client network.

Since linux kernel >= 2.6.33 the kernel option "accept_local" can be modified:

/proc/sys/net/ipv4/conf/{interfaceID}/

accept_local - BOOLEAN

Accept packets with local source addresses.