Log martian packets

[igoraj]

Not sure why this line is commented-out:
https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L144

In chef and ansible flavors of this module it defaults to 0.
However from hardening perspective it should probably default to 1 and optionally set to 0.

Should i prepare a PR?

[atomic111]

Hi @igoraj ,
yes you are correct we can remove that comment and set the default value to 0. If you set it to 1 it may cause a DoS to your system. log_martians will enable kernel logging of all received packets that have impossible source IP addresses. This could lead to massiv logging.

But you can prepare a PR. Thank you