HP UX Bastille User Manual page 43

•
•
•
•
•
•
•
•
•
•
•
•
•
For more information on each of these parameters, run ndd -h
NOTE:
in effect, you must merge the settings manually. A reminder is added to your
TODO.txt file.
IMPORTANT:
See the TODO.txt file for details.
Actions If the /etc/rc.config.d/nddconf file has no entries, the following
parameters are set:
ip_forward_directed_broadcasts=0
ip_forward_src_routed=0
ip_forwarding=0
ip_ire_gw_probe=0
ip_pmtu_strategy=1
ip_respond_to_echo_broadcast= 0
ip_send_redirects= 0
ip_send_source_quench=0
tcp_conn_request_max=4096
tcp_syn_rcvd_max=4096
arp_cleanup_interval= 60000
ip_respond_to_timestamp= 0
ip_respond_to_timestamp_broadcast= 0
Otherwise, an item is created in the TODO.txt file for you to manually
integrate the parameter changes.
HP_UX.other_tools
Headline Provide information about other security tools that HP has to offer.
Default N
Description Although HP-UX Bastille helps to configure most of the security-relevant
features of your operating system, it is not a substitute for a complete security
solution. Such a solution includes properly configured firewalls, network
topologies, intrusion detection, policies, and user education. Hewlett-Packard
has tools and resources to help with most aspects of system security.
arp_cleanup_interval–60000
ip_forward_directed_broadcasts–0
ip_forward_src_routed–0
ip_forwarding–0
ip_ire_gw_probe–0
ip_pmtu_strategy–1
ip_respond_to_echo_broadcast–0
ip_respond_to_timestamp–0
ip_respond_to_timestamp_broadcast–0
ip_send_redirects–0
ip_send_source_quench–0
tcp_conn_request_max–4096
tcp_syn_rcvd_max–4096
If you already have some non-default, non-HP-UX Bastille settings
Manual action may be required to complete this configuration.
43