linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-01-24 06:52:14 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Typos and a minor change to firewall script

Browse Source 
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@7777 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Bruce Dubbs 2009-02-24 09:53:46 +00:00
parent 0a3f5f34aa
commit c81fed47f7
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
postlfs/filesystems/reiser.xml
View File

@ -5,7 +5,7 @@
%general-entities;
<!ENTITY reiser-download-http "http://www.kernel.org/pub/linux/utils/fs/reiserfs/reiserfsprogs-&reiser-version;.tar.bz2">
<!ENTITY reiser-download-ftp "&sources-anduin-ftp;/r/reiserfsprogs-&reiser-version;.tar.gz">
<!ENTITY reiser-download-ftp "&sources-anduin-ftp;/r/reiserfsprogs-&reiser-version;.tar.bz2">
<!ENTITY reiser-md5sum "0639cefac8f8150536cfa7531c2aa2d2">
<!ENTITY reiser-size "320 KB">
<!ENTITY reiser-buildsize "9.3 MB">

6
postlfs/security/firewalling.xml
View File

@ -196,6 +196,7 @@ echo 1 &gt; /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
# Disable Source Routed Packets
echo 0 &gt; /proc/sys/net/ipv4/conf/all/accept_source_route
echo 0 &gt; /proc/sys/net/ipv4/conf/default/accept_source_route
# Enable TCP SYN Cookie Protection
echo 1 &gt; /proc/sys/net/ipv4/tcp_syncookies
@ -203,15 +204,18 @@ echo 1 &gt; /proc/sys/net/ipv4/tcp_syncookies
# Disable ICMP Redirect Acceptance
echo 0 &gt; /proc/sys/net/ipv4/conf/all/accept_redirects
# Don¹t send Redirect Messages
# Don't send Redirect Messages
echo 0 &gt; /proc/sys/net/ipv4/conf/all/send_redirects
echo 0 &gt; /proc/sys/net/ipv4/conf/default/send_redirects
# Drop Spoofed Packets coming in on an interface, where responses
# would result in the reply going out a different interface.
echo 1 &gt; /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 &gt; /proc/sys/net/ipv4/conf/default/rp_filter
# Log packets with impossible addresses.
echo 1 &gt; /proc/sys/net/ipv4/conf/all/log_martians
echo 1 &gt; /proc/sys/net/ipv4/conf/default/log_martians
# be verbose on dynamic ip-addresses (not needed in case of static IP)
echo 2 &gt; /proc/sys/net/ipv4/ip_dynaddr