1 files changed, 8 insertions, 0 deletions
diff --git a/sysctl.conf b/sysctl.conf
new file mode 100644
index 00000000..59a86d44
--- /dev/null
+++ b/sysctl.conf
@@ -0,0 +1,8 @@
+# Disables packet forwarding
+net.ipv4.ip_forward = 0
+# Enables source route verification
+net.ipv4.conf.all.rp_filter = 1
+# Disables automatic defragmentation (needed for masquerading, LVS)
+net.ipv4.ip_always_defrag = 0
+# Disables the magic-sysrq key
+kernel.sysrq = 0