network: drop unsolicited IPv6 neighbor advertisements by default

It could be used to poison neighbor table... QubesOS/qubes-issues#718
QubesOS · Dec 7, 2017 · 20d9a0b · 20d9a0b
1 parent 715693b
commit 20d9a0b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/network/80-qubes.conf b/network/80-qubes.conf
@@ -1 +1,2 @@
 net.ipv4.ip_forward=1
+net.ipv6.conf.all.drop_unsolicited_na=1