What is the right security setting for the
net.ipv4.conf.all.secure_redirects option in
Here it sets to
1 and Here sets to
net.ipv4.conf.default.secure_redirects related to previous? and ٌWhat is the right setting for it?
1st link (wiki.ubuntu.com) stated:
The following sysctl settings are default at the time of this writing. We intend that they stay this way.
net.ipv4.conf.all.secure_redirects = 1.
Prevents hijacking of routing path by only allowing redirects from gateways known in our routing table.
2nd link (joshrendek.com) states:
# Make sure no one can alter the routing tables net.ipv4.conf.all.accept_redirects = 0 net.ipv4.conf.default.accept_redirects = 0 net.ipv4.conf.all.secure_redirects = 0 net.ipv4.conf.default.secure_redirects = 0