add sysctl net.ipv4.conf.all.rp_filter = 1 - Githubissues

HidingCherry / ansible-archlinux-encrypted-root

ansible script to install a fully encrypted archlinux system

GNU Affero General Public License v3.0

1 stars 0 forks source link

add sysctl net.ipv4.conf.all.rp_filter = 1 #41

Open HidingCherry opened 2 years ago

HidingCherry commented 2 years ago

We do not want to route packets from one route to another. https://www.theurbanpenguin.com/rp_filter-and-lpic-3-linux-security/ https://wiki.archlinux.org/title/simple_stateful_firewall#Protection_against_spoofing_attacks