d8952ed26f
* Disabled gputest
* The package is failing to install.
* Now using Midori GTK3 build
* GTK2 was pulled from main repos for security reasons
* Removed warnings about missing UFD
* For use with live sessions
* Wallpaper updated for live sessions
* Wallpaper is now set at startup
* Checks for UFD source but defaults to included file
* Bugfix: Wallpaper is now set for multiple monitor/workspace setups
* Disabled choose-mirror service
* Better permission handling
* build-wk now checks if running as root
* build-wk now sets permissions before calling build.sh
* Should prevent build failues as build.sh expects files to be owned by root
* build-wk sets ownership back to builduser.builduser during cleanup
* Better menu for HW-Diags
* The script now returns to the menu after running a selection
* Unless the mode was set directly by passing a valid argument
* NOTE: This allows for easier use in CLI mode
* Add delay before removing /media/wktech
* Adjusted TMP_DIR in build-wk
* Fixed path to custom repo
* Trimming the fat
* hostname / hosts now configured by customize_airootfs.sh
* removed files from etc that were at default settings
* removed grml zsh config since oh-my-zsh/lean is used
* Defined a LOG_DIR for build-wk
* Introducing libinput
* Switched to libinput over synaptics as it has been deprecated.
* Should restore touchpad functionality going forward.
* Full mount path SHOULD now be displayed for mount-all-volumes.
* Added CLI Screensavers
* diag-network works now
* network connection tests now passes all ipv4 private ip ranges
* 10.0.0.0/8, 172.16.0.0/12, & 192.168.0.0/24
* need to add ipv6 at some point
* hw-diag menu flow adjusted
* New hostname and more bugfixes
* hostname switched to wk-arch
* ufw package is now installed
* adjusted upload section of hw-diags
* Added alias for start-wifi
* Booting to CLI mode will autologin wktech
* When booting to the CLI the motd shows some avail commands
* Adjusted HW-Diags menu for use in CLI mode
57 lines
1.9 KiB
Text
57 lines
1.9 KiB
Text
#
|
|
# Configuration file for setting network variables. Please note these settings
|
|
# override /etc/sysctl.conf. If you prefer to use /etc/sysctl.conf, please
|
|
# adjust IPT_SYSCTL in /etc/default/ufw.
|
|
#
|
|
|
|
# Uncomment this to allow this host to route packets between interfaces
|
|
#net/ipv4/ip_forward=1
|
|
#net/ipv6/conf/default/forwarding=1
|
|
#net/ipv6/conf/all/forwarding=1
|
|
|
|
# Turn on Source Address Verification in all interfaces to prevent some
|
|
# spoofing attacks
|
|
net/ipv4/conf/default/rp_filter=1
|
|
net/ipv4/conf/all/rp_filter=1
|
|
|
|
# Do not accept IP source route packets (we are not a router)
|
|
net/ipv4/conf/default/accept_source_route=0
|
|
net/ipv4/conf/all/accept_source_route=0
|
|
net/ipv6/conf/default/accept_source_route=0
|
|
net/ipv6/conf/all/accept_source_route=0
|
|
|
|
# Disable ICMP redirects. ICMP redirects are rarely used but can be used in
|
|
# MITM (man-in-the-middle) attacks. Disabling ICMP may disrupt legitimate
|
|
# traffic to those sites.
|
|
net/ipv4/conf/default/accept_redirects=0
|
|
net/ipv4/conf/all/accept_redirects=0
|
|
net/ipv6/conf/default/accept_redirects=0
|
|
net/ipv6/conf/all/accept_redirects=0
|
|
|
|
# Ignore bogus ICMP errors
|
|
net/ipv4/icmp_echo_ignore_broadcasts=1
|
|
net/ipv4/icmp_ignore_bogus_error_responses=1
|
|
net/ipv4/icmp_echo_ignore_all=0
|
|
|
|
# Don't log Martian Packets (impossible packets)
|
|
net/ipv4/conf/default/log_martians=0
|
|
net/ipv4/conf/all/log_martians=0
|
|
|
|
# Change to '1' to enable TCP/IP SYN cookies This disables TCP Window Scaling
|
|
# (http://lkml.org/lkml/2008/2/5/167)
|
|
net/ipv4/tcp_syncookies=0
|
|
|
|
#net/ipv4/tcp_fin_timeout=30
|
|
#net/ipv4/tcp_keepalive_intvl=1800
|
|
|
|
# normally allowing tcp_sack is ok, but if going through OpenBSD 3.8 RELEASE or
|
|
# earlier pf firewall, should set this to 0
|
|
net/ipv4/tcp_sack=1
|
|
|
|
# Uncomment this to turn off ipv6 autoconfiguration
|
|
#net/ipv6/conf/default/autoconf=0
|
|
#net/ipv6/conf/all/autoconf=0
|
|
|
|
# Uncomment this to enable ipv6 privacy addressing
|
|
#net/ipv6/conf/default/use_tempaddr=2
|
|
#net/ipv6/conf/all/use_tempaddr=2
|