shell-things/etc/sysctl.d/23-starts-unprivileged-ports.conf

# I mainly care about protecting 22/SSH, and don't see myself using ports
# below 80 (or 70 if Gopher fans around me get me around to it), the 1024
# unprivileged start is legacy that Windows and macOS have ended ages ago.
# Linux 4.11 April 2017, also works for IPv6
# https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux#comment90027734_51439516
net.ipv4.ip_unprivileged_port_start=23
sysctl.d: add 23-starts-unprivileged-ports.conf Self-explanatory within comments. Link list notes to selves contributing into this version: * https://kernelnewbies.org/Linux_4.11 * https://stackoverflow.com/a/51439516 * https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux#comment90027734_51439516 * https://developer.apple.com/forums/thread/674179 * https://news.ycombinator.com/item?id=18302380 * https://security.stackexchange.com/q/242859 * https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux#comment90027734_51439516 2021-06-12 20:52:39 +02:00			`# I mainly care about protecting 22/SSH, and don't see myself using ports`
			`# below 80 (or 70 if Gopher fans around me get me around to it), the 1024`
			`# unprivileged start is legacy that Windows and macOS have ended ages ago.`
			`# Linux 4.11 April 2017, also works for IPv6`
			`# https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux#comment90027734_51439516`
			`net.ipv4.ip_unprivileged_port_start=23`