ivabus/nixos
1
0
Fork 0
mirror of https://github.com/ivabus/nixos synced 2024-11-10 02:25:18 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

Allow outgoing pings

Browse source 
Signed-off-by: Ivan Bushchik <ivabus@ivabus.dev>
This commit is contained in:
Ivan Bushchik 2023-12-09 20:14:41 +03:00
parent 3dc13df65f
commit 7654ccfd97
No known key found for this signature in database
GPG key ID: 2F16FBF3262E090C
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
common/security.nix
View file

@ -19,6 +19,9 @@
boot.kernel.sysctl = { boot.kernel.sysctl = {
"kernel.sysrq" = 0; "kernel.sysrq" = 0;
# Yo, WTF?
"net.ipv4.ping_group_range" = "0 1000";
# Picked from https://github.com/trimstray/the-practical-linux-hardening-guide/wiki/Network-stack # Picked from https://github.com/trimstray/the-practical-linux-hardening-guide/wiki/Network-stack
"net.ipv4.icmp_ignore_bogus_error_responces" = 1; "net.ipv4.icmp_ignore_bogus_error_responces" = 1;