There may be a more substantive problem with this report: iron:~# tigexp lin012w
The system is configured to accept ICMP redirects, this might or might not be necessary in your network topology. If you have multiple routers to which connect through to outside locations it might be necessary, otherwise remote it since an attacker could send bogus ICMP redirection messages to try to route the outgoing network packets to other systems (including his own) and thus allowing for man in the middle or denial of service attacks: # sysctl -w net.ipv4.conf.all.accept_redirects = 0 # sysctl -w net.ipv4.conf.default.accept_redirects = 0 iron:~# sysctl net.ipv4.conf.all.accept_redirects net.ipv4.conf.all.accept_redirects = 0 If I interpret that correctly, it's telling me I should set all.accept_redirects to 0 when it already is 0. So I think the report is in error. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
