I'm primarily a
User Developer Sysadmin A mixture Something else entirely .. ( 513 votes ~ 10 comments )
You are not currently logged in. If you do not have a user account then please consider creating one and logging in before you post your comment. This will allow you to track replies to your comment, and take part in the site much more freely.
To add your comment, fill in all the boxes below and then preview it to make sure you're happy with the way that it looks.
This is the comment you were replying to, attached to the article Secure Networking within kernel:
#6 Re: Secure Networking within kernel Posted by Anonymous (81.57.xx.xx) on Tue 27 Sep 2005 at 16:19 Some others that might be of interest for this topic: /proc/sys/net/ipv4/icmp_ratelimit /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses /proc/sys/net/ipv4/conf/*/log_martians /proc/sys/net/ipv4/conf/*/accept_redirects /proc/sys/net/ipv4/conf/*/accept_source_route For a complete reference of kernel IP tunable sysctls, see /usr/src/linux-2.6.11.12/Documentation/networking/ip-sysctl.txt To reply another comment: you don't need to reboot in order to apply on the fly /etc/sysctl.conf modifications: sysctl -p /etc/sysctl.conf # is enough By the way, setting all those params on /etc/sysctl.conf is imho the proper way to do it. One should never try to override (or be overriden by ? are your scripts started before procps ? take care !) a standard config file.
Posting Format:
Inappropriate comments will be removed.
Some help on entry formatting is available
Username:
Password:
[ Advanced Login ]
Register Account