fix 安全加固允许ip_forward

2019-06-05 21:07:58 +08:00 · 2019-06-05 21:07:58 +08:00 · f7f88aafdb
parent 5859315c3e
commit f7f88aafdb
1 changed files with 2 additions and 2 deletions
--- a/roles/os-harden/os-harden.yml
+++ b/roles/os-harden/os-harden.yml
@ -7,8 +7,8 @@
    os_security_suid_sgid_whitelist: ['/usr/bin/rlogin']
    os_filesystem_whitelist: ['vfat']
    sysctl_config:
-      net.ipv4.ip_forward: 0
-      net.ipv6.conf.all.forwarding: 0
+      net.ipv4.ip_forward: 1
+      net.ipv6.conf.all.forwarding: 1
      net.ipv6.conf.all.accept_ra: 0
      net.ipv6.conf.default.accept_ra: 0
      net.ipv4.conf.all.rp_filter: 1