An XCCDF Group - A logical subset of the XCCDF Benchmark
shared_media
net.ipv4.conf.all.accept_local
$ sudo sysctl -w net.ipv4.conf.all.accept_local=0
/etc/sysctl.d
net.ipv4.conf.all.accept_local = 0
net.ipv4.conf.all.arp_filter
$ sudo sysctl -w net.ipv4.conf.all.arp_filter=
net.ipv4.conf.all.arp_filter =
net.ipv4.conf.all.arp_ignore
$ sudo sysctl -w net.ipv4.conf.all.arp_ignore=
net.ipv4.conf.all.arp_ignore =
net.ipv4.conf.all.route_localnet
$ sudo sysctl -w net.ipv4.conf.all.route_localnet=0
net.ipv4.conf.all.route_localnet = 0
net.ipv4.conf.all.rp_filter
$ sudo sysctl -w net.ipv4.conf.all.rp_filter=1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.all.secure_redirects
$ sudo sysctl -w net.ipv4.conf.all.secure_redirects=0
net.ipv4.conf.all.secure_redirects = 0
net.ipv4.conf.all.shared_media
$ sudo sysctl -w net.ipv4.conf.all.shared_media=
net.ipv4.conf.all.shared_media =
net.ipv4.conf.default.accept_redirects
$ sudo sysctl -w net.ipv4.conf.default.accept_redirects=0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.shared_media
$ sudo sysctl -w net.ipv4.conf.default.shared_media=
net.ipv4.conf.default.shared_media =
net.ipv4.icmp_echo_ignore_broadcasts
$ sudo sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses
$ sudo sysctl -w net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_syncookies
$ sudo sysctl -w net.ipv4.tcp_syncookies=1
net.ipv4.tcp_syncookies = 1