diff --git a/roles/network/tasks/install.yml b/roles/network/tasks/install.yml index bb8b9592f..232b67ddc 100644 --- a/roles/network/tasks/install.yml +++ b/roles/network/tasks/install.yml @@ -57,7 +57,7 @@ with_items: - { name: 'net.ipv4.ip_forward', value: '1' } # Default: 0. Masquerading LAN->Internet - { name: 'net.ipv4.conf.default.rp_filter', value: '1' } # Default: 2. Enable Spoof protection (reverse-path filter) - - { name: 'net.ipv4.conf.default.accept_source_route', value: '0' } # Default: 1. Do not accept IP source route packets (we are not a router); Default: 1 + - { name: 'net.ipv4.conf.default.accept_source_route', value: '0' } # Default: 1. Do not accept IP source route packets (we are not a router) #- { name: 'net.ipv4.tcp_syncookies', value: '1' } # Very standard in 2020 - { name: 'net.ipv6.conf.all.disable_ipv6', value: '1' } # Default: 0. Disable IPv6 #- { name: 'net.ipv6.conf.default.disable_ipv6', value: '1' } # AUTO-SET