From b109b0d840e6021f09338adfcfaa9a49fa4757aa Mon Sep 17 00:00:00 2001 From: CallMeR <9463297+callmer@user.noreply.gitee.com> Date: Fri, 1 Dec 2023 00:40:19 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20TS=20=E6=B5=8B=E8=AF=95?= =?UTF-8?q?=E9=85=8D=E7=BD=AE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/debian/debian_ts_99_sysctl.conf | 15 ---------- src/debian/debian_ts_lo_network.conf | 45 ---------------------------- 2 files changed, 60 deletions(-) diff --git a/src/debian/debian_ts_99_sysctl.conf b/src/debian/debian_ts_99_sysctl.conf index 4956966..201aa2c 100644 --- a/src/debian/debian_ts_99_sysctl.conf +++ b/src/debian/debian_ts_99_sysctl.conf @@ -19,12 +19,6 @@ net.core.netdev_budget_usecs = 20000 net.core.rps_sock_flow_entries = 32768 -net.ipv4.conf.all.accept_redirects = 0 -net.ipv4.conf.default.accept_redirects = 0 - -net.ipv4.conf.all.accept_source_route = 0 -net.ipv4.conf.default.accept_source_route = 0 - net.ipv4.conf.all.arp_ignore = 1 net.ipv4.conf.default.arp_ignore = 1 @@ -46,15 +40,6 @@ net.ipv4.tcp_fin_timeout = 30 net.ipv4.tcp_keepalive_time = 120 net.ipv4.tcp_syncookies = 1 -net.ipv6.conf.all.accept_ra = 0 -net.ipv6.conf.default.accept_ra = 0 - -net.ipv6.conf.all.accept_redirects = 0 -net.ipv6.conf.default.accept_redirects = 0 - -net.ipv6.conf.all.accept_source_route = 0 -net.ipv6.conf.default.accept_source_route = 0 - net.ipv6.conf.all.use_tempaddr = 0 net.ipv6.conf.default.use_tempaddr = 0 diff --git a/src/debian/debian_ts_lo_network.conf b/src/debian/debian_ts_lo_network.conf index cb33d83..4c95c35 100644 --- a/src/debian/debian_ts_lo_network.conf +++ b/src/debian/debian_ts_lo_network.conf @@ -9,21 +9,12 @@ Name=lo Destination=0.0.0.0/8 Type=unreachable [Route] -Destination=10.0.0.0/8 -Type=unreachable -[Route] -Destination=100.64.0.0/10 -Type=unreachable -[Route] Destination=127.0.0.0/8 Type=unreachable [Route] Destination=169.254.0.0/16 Type=unreachable [Route] -Destination=172.16.0.0/12 -Type=unreachable -[Route] Destination=192.0.0.0/24 Type=unreachable [Route] @@ -36,9 +27,6 @@ Type=unreachable Destination=192.88.99.0/24 Type=unreachable [Route] -Destination=192.168.0.0/16 -Type=unreachable -[Route] Destination=198.18.0.0/15 Type=unreachable [Route] @@ -87,39 +75,6 @@ Type=unreachable Destination=2002::/16 Type=unreachable [Route] -Destination=fc00::/7 -Type=unreachable -[Route] Destination=fe80::/10 Type=unreachable -[Route] -Table=1024 -Destination=fc00::/7 -Type=throw -[Route] -Table=1024 -Destination=::/0 -Type=prohibit -[Route] -Table=1024 -Destination=10.0.0.0/10 -Type=throw -[Route] -Table=1024 -Destination=172.16.0.0/12 -Type=throw -[Route] -Table=1024 -Destination=192.168.0.0/16 -Type=throw -[Route] -Table=1024 -Destination=0.0.0.0/0 -Type=prohibit - -[RoutingPolicyRule] -Priority=10000 -From=fc00::/7 -Table=1024 -