Skip to content

Commit

Permalink
Added some arguments on why you should still use TCP wrappers :)
Browse files Browse the repository at this point in the history
  • Loading branch information
pyllyukko committed Apr 7, 2024
1 parent 1426178 commit 463dea4
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@ For a complete list you can run `ansible-playbook --list-tasks harden.yml`.
### Network

* Enables [TCP wrappers](https://en.wikipedia.org/wiki/TCP_Wrapper)
* Some people consider TCP wrappers as obsolete and unnecessary, because nowadays firewall(s) take care of this kind of network level access. I disagree, because TCP wrappers still provide an additional layer of control in a case where the firewall(s) might fail for any number of reasons (usually misconfiguration). TCP wrappers also work as an network level ACL for the programs that utilize it and is a "native" control for those programs.
* IP stack hardening via sysctl settings
* For the complete list, see [network.conf.new](newconfs/sysctl.d/network.conf.new)
* Creates a basic firewall
Expand Down

0 comments on commit 463dea4

Please sign in to comment.