Not accepting source routing for IPv6. This was already done for IPv4. (#424)

Signed-off-by: Farid Joubbi <[email protected]>
This commit is contained in:
Farid Joubbi authored and GitHub committed 2021-03-24 07:55:29 +01:00
1 parent dfa89f7b47
commit d1143a06b1
1 file changed
+2
+2
View File
@@ -202,6 +202,8 @@ sysctl_config:
# so disable it if not needed. | sysctl-13
net.ipv4.conf.all.accept_source_route: 0
net.ipv4.conf.default.accept_source_route: 0
net.ipv6.conf.all.accept_source_route: 0
net.ipv6.conf.default.accept_source_route: 0
# For non-routers: don't send redirects.
# An attacker could use a compromised host to send invalid ICMP redirects to other