# # .etc.sysctl.conf - Configuration file for setting system variables # See sysctl.conf (5) for information. # #kernel.domainname = example.com # Ignore 'ICMP Redirects' message net.ipv4.conf.all.accept_redirects=0 # Ignore 'ICMP Echo Request' message net.ipv4.icmp_echo_ignore_broadcasts=1 net.ipv4.icmp_echo_ignore_all=1 # Ignore 'ICMP Bogus Repsonse' message net.ipv4.icmp_ignore_bogus_error_responses=1 # Interdire 'Source Routing' net.ipv4.conf.all.accept_source_route=0 # Surveiller 'martians' (adresse source falsifiée ou non routable) net.ipv4.conf.all.log_martians=1 # Se protéger de l'IP Spoofing' (vol d'adresse IP) net.ipv4.conf.all.rp_filter=1 # Se protéger des attaques 'SYN Flood' net.ipv4.tcp_syncookies=1