sysctl help needed.(Server Hardening).


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers sysctl help needed.(Server Hardening).
# 1  
Old 05-18-2011
sysctl help needed.(Server Hardening).

As per Hardening guide for the server.

ICMP Broadcast Response: The kernel parameter icmp_echo_ignore_broadcasts must match to 1

However when i check the value of icmp_echo_ignore_broadcasts it thrown an error as unkonwn key.

Code:
# sysctl icmp_echo_ignore_broadcasts
error: "icmp_echo_ignore_broadcasts" is an unknown key

I would like to know what is recommended at this point.
Shall i add it? Is there any way of adding the key?
or
Just ignore it as this key doesn't exists in my distribution.
# 2  
Old 05-18-2011
Depending on what O/S you actually have...
Might be:
Code:
net.ipv4.icmp_echo_ignore_broadcasts = 1

If you disable this your server will not answer "ping" or "traceroute" and there will be more side-effects.
# 3  
Old 05-19-2011
Code:
sysctl -w net.ipv4.icmp_echo_ignore_broadcasts="1"

 
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Linux

Password hardening using pam

Hi We have a requirement to vary the minimum password criteria by the group to which a user belongs. For example a standard user should have a password with a minimum length of 12 and containing a mix of characters whereas an administrator should have a password with a minimum length of 14... (1 Reply)
Discussion started by: gregsih
1 Replies

2. Cybersecurity

C-ICAP Hardening

Does anyone have any experience hardening the c-icap.conf file? Here is the default config file, it has a lot of options; sorry about how long it is. I have removed some entries that were not needed as well, but it is still so long :D. Any help is much appreciated as I have never dealt with ICAP. ... (0 Replies)
Discussion started by: savigabi
0 Replies

3. Solaris

sun server needed

Hello, I'm searching for a sun server with solaris 10 OS to be used for backup ,the server will hold .tar backups from different servers ,size of backups will not be more than 90GB ,I need your suggestions for suitable server with acceptable price since I have a little experience with SUN... (17 Replies)
Discussion started by: mm00123
17 Replies

4. Solaris

Hardening Solaris

What do we need to do to harden a freshly installed solaris OS? like disable telnet, no ftp for root etc...What all services you need to stop? How to check what ports are open? etc etc....please provide all tips that come to your mind...thanks:) (5 Replies)
Discussion started by: rcmrulzz
5 Replies

5. Solaris

Hardening Solaris 10

So I've just done my first install of Solaris. I installed it on an x86 system and am now in the processing of figuring out what I need to do to 'harden' it. I've got the Security kit downloaded (jass) but I am not sure what to do with the .tar file. I can't seem to find any easy steps to... (6 Replies)
Discussion started by: flood
6 Replies

6. UNIX for Dummies Questions & Answers

Any leads to hardening UNIX

Hi! I am trying to get info/best practices/how-to harden unix, especially solaris! Appreciate any leads please..................... (3 Replies)
Discussion started by: sdharmap
3 Replies

7. IP Networking

Any knowledge for sysctl?

HI folks. I am developing a protocol and I need to bind to an IP address that is not configured to my machine. The problem is with bind(). The sysctl system call seamed to overcome the problem of bind if you set the proc/sys/net/ipv4/ip_nonlocal_bind flag. Although I tryed to set the flag either... (7 Replies)
Discussion started by: developer
7 Replies
Login or Register to Ask a Question