记载我的心路历程

  • Postfix 电子邮件系统精要(二)

    2010-03-19

    ◆系统加固及安全

    1、内核优化：用脚本实现
    [root@mailserv2 ~]# more /usr/local/bin/kernel_optimize
    #!/bin/bash
    #kernel optimize optimize ,create by 2007-7-29
    #enable broadcast echo protection
    echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
    #disble source routed packets
    #for f in /proc/sys/net/ipv4/conf/*/accept_source_rout; do
    #    echo 0 > $f
    #done
    #enable tcp syn cookie protection
    echo 1 > /proc/sys/net/ipv4/tcp_syncookies
    #disable icmp redirect acceptance
    for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do
    echo 0 > $f
    done
    #don’t send redirect messages
    for f in /proc/sys/net/ipv4/conf/*/send_redirects; do
    echo 0 > $f
    done
    #drop spoofed packets
    for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
    echo 1 > $f
    done
    #log packets with impossible addresses
    for f in /proc/sys/net/ipv4/conf/*/log_martians; do
    echo 1 > $f Read More »
    作者：now163 | 分类目录：邮件 | 标签： 、
    没有评论