Linux Security Hardening

sysctl: used to modify kernel parameters at runtime

sysctl is an interface that allows you to make changes to a running Linux kernel.

With /etc/sysctl.conf you can configure various Linux networking and system settings such as:

1. Limit network-transmitted configuration for IPv4
2. Limit network-transmitted configuration for IPv6
3. Turn on execshield protection
4. Prevent against the common 'syn flood attack'
5. Turn on source IP address verification
6. Prevents a cracker from using a spoofing attack against the IP address of the server.
7. Logs several types of suspicious packets, such as spoofed packets, source-routed packets, and redirects.

http://www.cyberciti.biz/faq/linux-kernel-etcsysctl-conf-security-hardening/