From e52934f17a632e0fc93ae5942fea193dc540599d Mon Sep 17 00:00:00 2001 From: Jason McNew Date: Wed, 2 Mar 2016 16:52:31 -0800 Subject: [PATCH] Enable martian logging under 'default' and 'all'. --- attributes/sysctl.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/attributes/sysctl.rb b/attributes/sysctl.rb index b6250262..a34d52c2 100644 --- a/attributes/sysctl.rb +++ b/attributes/sysctl.rb @@ -122,7 +122,8 @@ default['sysctl']['params']['net']['ipv4']['conf']['default']['send_redirects'] = 0 # log martian packets -default['sysctl']['params']['net']['ipv4']['conf']['all']['log_martians'] = 0 +default['sysctl']['params']['net']['ipv4']['conf']['all']['log_martians'] = 1 +default['sysctl']['params']['net']['ipv4']['conf']['default']['log_martians'] = 1 # ipv6 config # NSA 2.5.3.2.5 Limit Network-Transmitted Configuration