I want to make my Linux machine a web server.
I am looking to secure the kernel by applying changes to
/etc/sysctl.conf. I will first describe to you what my web app will be about.
The app will be a classified ads website (like gumtree.co.uk) where users can:
-sell their items, upload images, send to and receive emails from the admin. -It will use SSL for some pages. I will also need SSH.
/etc/sysctl.conf, I get all those options to uncomment, but I don't know which ones I can uncomment to secure the kernel more and serve my web hosting purposes at the same time.
Here are the different options:
1) Turn on Source Address Verification in all interfaces to prevent spoofing attacks 2) Uncomment the next line to enable packet forwarding for IPv4 3) Uncomment the next line to enable packet forwarding for IPv6 4) Do no accept ICMP redirects (we are not a router) 5) Accept ICMP redirects only for gateways listed in our default gateway list 6) Do not send ICMP redirects 7) Do not accept IP source route packets (we are not a router) 8) Log Martian Packets
Which ones can I uncomment? Also, is there something else you suggest in order to secure the kernel?
Thanks a lot. Regards