Skip to content

Commit

Permalink
---
Browse files Browse the repository at this point in the history
yaml
---
r: 134656
b: refs/heads/master
c: b2cc46a
h: refs/heads/master
v: v3
  • Loading branch information
Jesper Dangaard Brouer authored and David S. Miller committed Feb 23, 2009
1 parent a27a407 commit f5b2811
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 3 deletions.
2 changes: 1 addition & 1 deletion [refs]
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
---
refs/heads/master: 0117cfabe3ba9b430c6ff6eecd4fdc569977f24f
refs/heads/master: b2cc46a8ee905d1d642e01761939879c495e3e3a
6 changes: 4 additions & 2 deletions trunk/net/ipv4/Kconfig
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ config IP_ADVANCED_ROUTER

at boot time after the /proc file system has been mounted.

If you turn on IP forwarding, you will also get the rp_filter, which
If you turn on IP forwarding, you should consider the rp_filter, which
automatically rejects incoming packets if the routing table entry
for their source address doesn't match the network interface they're
arriving on. This has security advantages because it prevents the
Expand All @@ -46,9 +46,11 @@ config IP_ADVANCED_ROUTER
rp_filter on use:

echo 1 > /proc/sys/net/ipv4/conf/<device>/rp_filter
or
and
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter

Note that some distributions enable it in startup scripts.

If unsure, say N here.

choice
Expand Down

0 comments on commit f5b2811

Please sign in to comment.