Create an Unhackable Linux - Part I
To try everything Brilliant has to offer for 30 days completely free, visit https://brilliant.org/Hixec/. You'll also get 20% off Brilliant's annual Premium subscription.
--------
This video was sponsored by Brilliant.
--------
📐TABLE OF CONTENTS
00:00 Introduction
00:50 Network Hardening
07:21 Permission Hardening
🧿COMMANDS
Disable ICMP Redirects:
sysctl -w net.ipv4.conf.all.send_redirects=0: Prevents the system from sending ICMP redirects on all interfaces.
sysctl -w net.ipv4.conf.default.send_redirects=0: Sets disabling ICMP redirects as the default setting for new interfaces.
Disable IP Forwarding:
sysctl -w net.ipv4.ip_forward=0: Disables the system's ability to forward data packets between interfaces, preventing it from acting as a router.
Disable ICMP broadcast ping responses:
net.ipv4.icmp_echo_ignore_broadcasts=1: Prevents the system from responding to pings sent to broadcast addresses, reducing the attack surface for DDoS attacks.
Log only packets that comply with standards:
sysctl -w net.ipv4.icmp_ignore_bogus_error_responses=1: Configures the system to ignore malformed ICMP error responses.
Source Route Verification (SRV for those familiar with it):
sysctl -w net.ipv4.conf.all.rp_filter=1: Enables reverse route filtering on all interfaces, helping to prevent IP address spoofing.
sysctl -w net.ipv4.conf.default.rp_filter=1: Applies reverse route filtering as the default setting for new interfaces.
TCP SYN Cookies:
sysctl -w net.ipv4.tcp_syncookies=1: Enables SYN cookies, a feature that helps mitigate SYN flood attacks by protecting against flooding connection requests.
Update Rules (As applicable):
sysctl -w net.ipv4.route.flush=1: Flushes the routing cache to ensure configuration changes take effect immediately.
📩BUSINESS
[email protected]
[email protected]
📱SOCIAL MEDIA
🌐Martin
Instagram: / marti.hix
TikTok: / marti.hix
🥇Hixec
TikTok: / hixec_com
Instagram: / hixec_com
Linkedin: / hixec
Video Highlights:
Linux, hardening Linux, protecting Linux
#linux #cybersecurity #hixec
See you here at upcoming courses and workshops!