[gentoo-user] sysctl.conf settings

[gentoo-user] sysctl.conf settings

[Michael Kintzios]

Hi All,

I am going through some of the sysctl.conf packet settings and managed to  
confuse myself.  In particular when we have the following two settings:
=================
net.ipv4.conf.all.secure_redirects = 0
#net.ipv4.conf.default.secure_redirects = 0
=================
What's the difference betweeen them and which one takes precedence?  All,  
or default, when both are set?

Also, when one logs spoofed packets, etc. using  
'net/ipv4/conf/all/log_martians=1' where will these get logged?  Will I  
need to create a new entry in syslog-ng?  A new file in /var/log?

Regards,
-- 
Mick
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] sysctl.conf settings

[Matan Peled]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Michael Kintzios wrote:
> Also, when one logs spoofed packets, etc. using 
> 'net/ipv4/conf/all/log_martians=1' where will these get logged?  Will I 
> need to create a new entry in syslog-ng?  A new file in /var/log?
> 
> Regards,

It will go out with the rest of the kernel messages. syslog-ng is usually
configured to send those to /var/log/messages, but in some cases (such as the
hardened profile), will send those to /var/log/kern.log.

- --
[Name      ]   ::  [Matan I. Peled    ]
[Location  ]   ::  [Israel            ]
[Public Key]   ::  [0xD6F42CA5        ]
[Keyserver ]   ::  [keyserver.kjsl.com]
encrypted/signed  plain text  preferred

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDCKhVA7Qvptb0LKURAtFaAKCOkBD9NshzgKqd/uFgRyTvwGfAnACfd1DZ
8qnFa0Mf+B8h/xQkz+MhXMI=
=FBy4
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list