aboutsummaryrefslogtreecommitdiffstats
path: root/init-sh/level3.sh
diff options
context:
space:
mode:
authorFrederic Lepied <flepied@mandriva.com>2001-12-02 06:03:03 +0000
committerFrederic Lepied <flepied@mandriva.com>2001-12-02 06:03:03 +0000
commit6bee859a12623d0b04d3672fade41b8b181bdb19 (patch)
treec0c8e5ff0ed1e3f6508386f5684c39dbd9a4771b /init-sh/level3.sh
parent622336d30f57e10f89dff90691fec753bead9e98 (diff)
downloadmsec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar
msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar.gz
msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar.bz2
msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar.xz
msec-6bee859a12623d0b04d3672fade41b8b181bdb19.zip
added sysctl.conf, host.conf and /etc/issue{.net} customization.
Diffstat (limited to 'init-sh/level3.sh')
-rwxr-xr-xinit-sh/level3.sh15
1 files changed, 15 insertions, 0 deletions
diff --git a/init-sh/level3.sh b/init-sh/level3.sh
index 26022fc..83fccf8 100755
--- a/init-sh/level3.sh
+++ b/init-sh/level3.sh
@@ -76,6 +76,21 @@ echo "Setting umask to 022 (u=rw,g=r,o=r) :"
AddRules "UMASK_ROOT=022" /etc/sysconfig/msec
AddRules "UMASK_USER=022" /etc/sysconfig/msec
+# icmp echo
+echo "Enabling icmp echo :"
+AddRules "net.ipv4.icmp_echo_ignore_all=0" /etc/sysctl.conf
+AddRules "net.ipv4.icmp_echo_ignore_broadcasts=1" /etc/sysctl.conf
+
+# bad error
+echo "Enabling bad error message Protection :"
+AddRules "net.ipv4.icmp_ignore_bogus_error_responses=1" /etc/sysctl.conf
+
+# log strange packets
+echo "Enabling logging Spoofed Packets, Source Routed Packets, Redirect Packets :"
+AddRules "net.ipv4.conf.all.log_martians=1" /etc/sysctl.conf
+
+LoadSysctl
+
# Do not boot on a shell
AllowReboot