diff options
| -rw-r--r-- | roles/core/base/vars/main.yml | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/roles/core/base/vars/main.yml b/roles/core/base/vars/main.yml index 9940d7a6..2312a8b9 100644 --- a/roles/core/base/vars/main.yml +++ b/roles/core/base/vars/main.yml @@ -11,9 +11,9 @@ base_sysctl_config: net.ipv4.conf.all.rp_filter: 1 net.ipv4.conf.default.rp_filter: 1 - # Log packets with impossible addresses to kernel log? yes - net.ipv4.conf.all.log_martians: 1 - net.ipv4.conf.default.log_martians: 1 + # disable logging of packets with impossible addresses + net.ipv4.conf.all.log_martians: 0 + net.ipv4.conf.default.log_martians: 0 # Reduce the surface on SMURF attacks. # Make sure to ignore ECHO broadcasts, which are only required in broad network analysis. |