evolix/minifirewall
21
0
Fork 0
Code Issues 4 Pull requests 3 Releases 1 Activity

more expressive variable names

Browse source
This commit is contained in:
Jérémy Lecour 2021-05-22 23:13:00 +02:00 committed by Jérémy Lecour
parent e071610a37
commit c9eecabdf8
1 changed files with 10 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
minifirewall
View file

@ -140,8 +140,8 @@ start() {
echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
# Disable Source Routing
for i in /proc/sys/net/ipv4/conf/*/accept_source_route; do
echo 0 > "${i}"
for proc_sys_file in /proc/sys/net/ipv4/conf/*/accept_source_route; do
echo 0 > "${proc_sys_file}"
done
# Enable TCP SYN cookies to avoid TCP-SYN-FLOOD attacks
@ -149,22 +149,22 @@ start() {
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
# Disable ICMP redirects
for i in /proc/sys/net/ipv4/conf/*/accept_redirects; do
echo 0 > "${i}"
for proc_sys_file in /proc/sys/net/ipv4/conf/*/accept_redirects; do
echo 0 > "${proc_sys_file}"
done
for i in /proc/sys/net/ipv4/conf/*/send_redirects; do
echo 0 > "${i}"
for proc_sys_file in /proc/sys/net/ipv4/conf/*/send_redirects; do
echo 0 > "${proc_sys_file}"
done
# Enable Reverse Path filtering : verify if responses use same network interface
for i in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > "${i}"
for proc_sys_file in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > "${proc_sys_file}"
done
# log des paquets avec adresse incoherente
for i in /proc/sys/net/ipv4/conf/*/log_martians; do
echo 1 > "${i}"
for proc_sys_file in /proc/sys/net/ipv4/conf/*/log_martians; do
echo 1 > "${proc_sys_file}"
done
# IPTables configuration