Skip to content

Conversation

@prince03batra
Copy link

Automates checks to ensure secure network settings — disabling IP forwarding, ICMP redirects, and source-routed packets, while enabling SYN cookies, reverse path filtering, and other protections to meet CIS benchmark standards.


# Apply settings to the running kernel (IPv6 only if enabled)
- name: "Apply sysctl parameters at runtime"
ansible.builtin.shell: |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use ansible module ansible.posix.sysctl

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants