diff options
author | Bertrand Jacquin <bertrand@jacquin.bzh> | 2023-09-12 00:05:06 +0100 |
---|---|---|
committer | Bertrand Jacquin <bertrand@jacquin.bzh> | 2023-09-12 00:06:08 +0100 |
commit | a971c5fbfc2a30e0a571dfcfb5a399cb0153e446 (patch) | |
tree | 882f1b7a17e8fac21169647a7c876265eb2831fb | |
parent | factory-default/sys-apps/baselayout: define net.ipv6.conf..addr_gen_mode (diff) | |
download | portage-a971c5fbfc2a30e0a571dfcfb5a399cb0153e446.tar.xz |
factory-default/sys-apps/baselayout: Ignore ICMP multicast/broadcast for ipv6
-rw-r--r-- | factory-default/sys-apps/baselayout/etc/sysctl.conf | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/factory-default/sys-apps/baselayout/etc/sysctl.conf b/factory-default/sys-apps/baselayout/etc/sysctl.conf index 39e8e34c..6ecec665 100644 --- a/factory-default/sys-apps/baselayout/etc/sysctl.conf +++ b/factory-default/sys-apps/baselayout/etc/sysctl.conf @@ -168,8 +168,10 @@ net.ipv4.conf.default.route_localnet = 0 net.ipv4.conf.all.log_martians = 1 net.ipv4.conf.default.log_martians = 1 -# Ignore ICMP broadcasts +# Ignore ICMP multicast/broadcast net.ipv4.icmp_echo_ignore_broadcasts = 1 +net.ipv6.icmp.echo_ignore_multicast = 1 +net.ipv6.icmp.echo_ignore_anycast = 1 # Ignore bogus responses to broadcast net.ipv4.icmp_ignore_bogus_error_responses = 1 |