From 1dda69b104e3b14c6490603af6b989bf58a4e64d Mon Sep 17 00:00:00 2001 From: simeononsecurity <4913771+simeononsecurity@users.noreply.github.com> Date: Wed, 2 Feb 2022 05:39:33 +0000 Subject: [PATCH] Update windows10.ps1 --- windows10.ps1 | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/windows10.ps1 b/windows10.ps1 index 1179662..ff688be 100644 --- a/windows10.ps1 +++ b/windows10.ps1 @@ -447,4 +447,15 @@ Start-Job -Name "Configuring Windows - Optimizations, Debloating, and Hardening" #Enable Sandboxing for Windows Defender setx /M MP_FORCE_USE_SANDBOX 1 + #Harden IPv6 + #https://ernw.de/download/ERNW_Guide_to_Configure_Securely_Windows_Servers_For_IPv6_v1_0.pdf + netsh interface ipv6 set global mldlevel=none + netsh interface ipv6 set global icmpredirects=disabled + netsh interface ipv6 set global defaultcurhoplimit=64 + netsh interface ipv6 isatap set state disabled + #netsh interface ipv6 set teredo type=disabled + #netsh interface ipv6 6to4 set state disabled + + + }