4.6 Divers

• Anti-spoofing : à exécuter le plus tôt possible.

  ---

         # This is the best method: turn on Source Address Verification and get
         # spoof protection on all current and future interfaces.
         if [ -e /proc/sys/net/ipv4/conf/all/rp_filter ]; then
           echo -n "Setting up IP spoofing protection..."
           for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
               echo 1 > $f
           done
           echo "done."
         else
           echo PROBLEMS SETTING UP IP SPOOFING PROTECTION.  BE WORRIED.
           echo "CONTROL-D will exit from this shell and continue system startup."
           echo
           # Start a single user shell on the console
           /sbin/sulogin $CONSOLE
         fi
  

  ---

• IP forwarding / masquerading : à exécuter le plus tard possible.

  ---

         # echo 1 > /proc/sys/net/ipv4/ip_forward
  

  ---

Travaux Pratiques de Sécurisation Linux

Page suivantePage précédente Table des matières