Add Comment

You are not currently logged in. If you do not have a user account then please consider creating one and logging in before you post your comment. This will allow you to track replies to your comment, and take part in the site much more freely.

To add your comment, fill in all the boxes below and then preview it to make sure you're happy with the way that it looks.

This is the comment you were replying to, attached to the article Secure Networking within kernel:


Re: Secure Networking within kernel
Posted by Anonymous (81.57.xx.xx) on Tue 27 Sep 2005 at 16:19
Some others that might be of interest for this topic:
/proc/sys/net/ipv4/icmp_ratelimit
/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
/proc/sys/net/ipv4/conf/*/log_martians
/proc/sys/net/ipv4/conf/*/accept_redirects
/proc/sys/net/ipv4/conf/*/accept_source_route

For a complete reference of kernel IP tunable sysctls, see /usr/src/linux-2.6.11.12/Documentation/networking/ip-sysctl.txt

To reply another comment: you don't need to reboot in order to apply on the fly /etc/sysctl.conf modifications:

sysctl -p /etc/sysctl.conf # is enough

By the way, setting all those params on /etc/sysctl.conf is imho the proper way to do it. One should never try to override (or be overriden by ? are your scripts started before procps ? take care !) a standard config file.

Username:Anonymous
Title:
Your Comment:

Posting Format:

 

Inappropriate comments will be removed.

Some help on entry formatting is available

User Login

Username:

Password:

[ Advanced Login ]

Register Account

Quick Site Search