Create an Unhackable Linux - Part I
To try everything Brilliant has to offer for 30 days completely free, visit https://brilliant.org/Hixec/. You'll also get 20% off Brilliant's annual Premium subscription.
--------
This video was sponsored by Brilliant.
--------
📐TABLE OF CONTENTS
00:00 Introduction
00:50 Network Hardening
07:21 Permission Hardening
🧿COMMANDS
Disable ICMP Redirects:
sysctl -w net.ipv4.conf.all.send_redirects=0: Prevents the system from sending ICMP redirects on all interfaces.
sysctl -w net.ipv4.conf.default.send_redirects=0: Sets disabling ICMP redirects as the default setting for new interfaces.
Disable IP Forwarding:
sysctl -w net.ipv4.ip_forward=0: Disables the system's ability to forward data packets between interfaces, preventing it from acting as a router.
Disable ICMP broadcast ping responses:
net.ipv4.icmp_echo_ignore_broadcasts=1: Prevents the system from responding to pings sent to broadcast addresses, reducing the attack surface for DDoS attacks.
Log only packets that comply with standards:
sysctl -w net.ipv4.icmp_ignore_bogus_error_responses=1: Configures the system to ignore malformed ICMP error responses.
Source Route Verification (SRV for those familiar with it):
sysctl -w net.ipv4.conf.all.rp_filter=1: Enables reverse route filtering on all interfaces, helping to prevent IP address spoofing.
sysctl -w net.ipv4.conf.default.rp_filter=1: Applies reverse route filtering as the default setting for new interfaces.
TCP SYN Cookies:
sysctl -w net.ipv4.tcp_syncookies=1: Enables SYN cookies, a feature that helps mitigate SYN flood attacks by protecting against flooding connection requests.
Update Rules (As applicable):
sysctl -w net.ipv4.route.flush=1: Flushes the routing cache to ensure configuration changes take effect immediately.
📩BUSINESS
hi@hixec.com
martin@hixec.com
📱SOCIAL MEDIA
🌐Martin
Instagram: / marti.hix
TikTok: / marti.hix
🥇Hixec
TikTok: / hixec_com
Instagram: / hixec_com
Linkedin: / hixec
Video Highlights:
Linux, hardening Linux, protecting Linux
#linux #cybersecurity #hixec
See you here at upcoming courses and workshops!
On this page of the site you can watch the video online Create an Unhackable Linux - Part I with a duration of hours minute second in good quality, which was uploaded by the user Hixec 29 April 2024, share the link with friends and acquaintances, this video has already been watched 10,130 times on youtube and it was liked by 459 viewers. Enjoy your viewing!
