arp_cleanup_interval–60000
•
•
ip_forward_directed_broadcasts–0
•
ip_forward_src_routed–0
•
ip_forwarding–0
•
ip_ire_gw_probe–0
•
ip_pmtu_strategy–1
•
ip_respond_to_echo_broadcast–0
•
ip_respond_to_timestamp–0
•
ip_respond_to_timestamp_broadcast–0
•
ip_send_redirects–0
•
ip_send_source_quench–0
•
tcp_conn_request_max–4096
•
tcp_syn_rcvd_max–4096
For more information on each of these parameters, run
ndd -h
NOTE:
If you already have some non-default, non-HP-UX Bastille settings
in effect, you must merge the settings manually. A reminder is added to your
TODO.txt
file.
IMPORTANT:
Manual action may be required to complete this configuration.
See the
TODO.txt
file for details.
Actions
If the
/etc/rc.config.d/nddconf
file has no entries, the following
parameters are set:
ip_forward_directed_broadcasts=0
ip_forward_src_routed=0
ip_forwarding=0
ip_ire_gw_probe=0
ip_pmtu_strategy=1
ip_respond_to_echo_broadcast= 0
ip_send_redirects= 0
ip_send_source_quench=0
tcp_conn_request_max=4096
tcp_syn_rcvd_max=4096
arp_cleanup_interval= 60000
ip_respond_to_timestamp= 0
ip_respond_to_timestamp_broadcast= 0
Otherwise, an item is created in the
TODO.txt
file for you to manually
integrate the parameter changes.
HP_UX.other_tools
Headline
Provide information about other security tools that HP has to offer.
Default
N
Description
Although HP-UX Bastille helps to configure most of the security-relevant
features of your operating system, it is not a substitute for a complete security
solution. Such a solution includes properly configured firewalls, network
topologies, intrusion detection, policies, and user education. Hewlett-Packard
has tools and resources to help with most aspects of system security.
43
