RE: Entirely ignoring TCP and UDP checksum in kernel level

From: Josan Kadett
Date: Sat Aug 21 2004 - 02:56:11 EST


I already have rp_filter to 0 for all interfaces. It is rather a
checksumming problem than a routing one. Only if there was such an easy way
to disable checksumming as there is for solaris, disabling both the
rp_filter and the checksums would finally end the problem. The poor system
still think that it is getting the packet from 192.168.1.1 because the IP
header tells as such, while the problematic network device computes the
TCP/UDP checksum as if it is still sending it via its 192.168.77.1 source
address. There is the kernel, and the code in it which handles checksumming.
But I doubt whether a simple patch would do...

> Isn't rp_filter for this?

> A chunk of my iptables firewall script is:

> # Force route verification
> for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 1 > $f; done

> So why don't you try:
> for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo "0" > $f; done

> Kalin.

--
|| ~~~~~~~~~~~~~~~~~~~~~~ ||
( ) http://ThinRope.net/ ( )
|| ______________________ ||

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/