ansible-bootstrap-rocky9/roles/rocky9/tasks/ip_spoofing.yml
2026-05-11 18:57:10 +03:00

18 lines
495 B
YAML

---
# Активируем защиту от IP-спуфинга.
- ansible.posix.sysctl:
name: net.ipv4.conf.default.rp_filter
value: 1
state: present
sysctl_file: /etc/sysctl.d/ip_spoofing.conf
- ansible.posix.sysctl:
name: net.ipv4.conf.all.rp_filter
value: 1
state: present
sysctl_file: /etc/sysctl.d/ip_spoofing.conf
- ansible.posix.sysctl:
name: net.ipv4.conf.lo.rp_filter
value: 1
state: present
sysctl_file: /etc/sysctl.d/ip_spoofing.conf