summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBertrand Jacquin <bertrand@jacquin.bzh>2023-09-12 00:05:06 +0100
committerBertrand Jacquin <bertrand@jacquin.bzh>2023-09-12 00:06:08 +0100
commita971c5fbfc2a30e0a571dfcfb5a399cb0153e446 (patch)
tree882f1b7a17e8fac21169647a7c876265eb2831fb
parentfactory-default/sys-apps/baselayout: define net.ipv6.conf..addr_gen_mode (diff)
downloadportage-a971c5fbfc2a30e0a571dfcfb5a399cb0153e446.tar.xz
factory-default/sys-apps/baselayout: Ignore ICMP multicast/broadcast for ipv6
-rw-r--r--factory-default/sys-apps/baselayout/etc/sysctl.conf4
1 files changed, 3 insertions, 1 deletions
diff --git a/factory-default/sys-apps/baselayout/etc/sysctl.conf b/factory-default/sys-apps/baselayout/etc/sysctl.conf
index 39e8e34c..6ecec665 100644
--- a/factory-default/sys-apps/baselayout/etc/sysctl.conf
+++ b/factory-default/sys-apps/baselayout/etc/sysctl.conf
@@ -168,8 +168,10 @@ net.ipv4.conf.default.route_localnet = 0
net.ipv4.conf.all.log_martians = 1
net.ipv4.conf.default.log_martians = 1
-# Ignore ICMP broadcasts
+# Ignore ICMP multicast/broadcast
net.ipv4.icmp_echo_ignore_broadcasts = 1
+net.ipv6.icmp.echo_ignore_multicast = 1
+net.ipv6.icmp.echo_ignore_anycast = 1
# Ignore bogus responses to broadcast
net.ipv4.icmp_ignore_bogus_error_responses = 1