Skip to content

feat: configure rp filter#120

Merged
bcho merged 1 commit intomainfrom
hbc/fix-sysctl
Mar 10, 2026
Merged

feat: configure rp filter#120
bcho merged 1 commit intomainfrom
hbc/fix-sysctl

Conversation

@bcho
Copy link
Member

@bcho bcho commented Mar 10, 2026

This pull request makes a small update to the Linux system configuration by enabling strict reverse path filtering for IPv4, which helps prevent IP spoofing.

  • Networking security:
    • Added net.ipv4.conf.all.rp_filter=2 and net.ipv4.conf.default.rp_filter=2 to enable strict reverse path filtering for all and default network interfaces in the sysctlSettings block of components/linux/v20260301/configure.go.

@bcho bcho merged commit 81a0c0b into main Mar 10, 2026
9 of 10 checks passed
@bcho bcho deleted the hbc/fix-sysctl branch March 10, 2026 22:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants