In Debian 2.1, /etc/init.d/netbase contains:
# This is the best method: turn on Source Address Verification and get
# spoof protection on all current and future interfaces.
if [ -e /proc/sys/net/ipv4/conf/all/rp_filter ]; then
echo -n "Setting up IP spoofing protection..."
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done
echo "done."
fi
I was wondering why my rp_filter was defaulting to 1 when
Documentation/proc.txt clearly said that it defaulted to 0.
However, I still don't know exactly why this only happens in 2.2.6 and
not 2.2.0. Diffs between the two trees don't contain the text
"rp_filter" at all. Perhaps it was a higher-up reorganization of the
/proc hierarchy..
Vermont@gate.net
+----[ On Sun, Apr 25, at 09:30PM(-0400), Steven N. Hirsch wrote: ]--------------
| On Sat, 24 Apr 1999, Christoph Lameter wrote:
|
| > Do
| >
| > echo 0 >/proc/net/ipv4/xxx/rp-filter
| >
| > to switch the discarding off. I got hit by that one too.
| >
| > On Sat, 24 Apr 1999, Illuminatus Primus wrote:
| >
| > > After upgrading from 2.2.0 to 2.2.6, it seems that packets that arrive
| > > on an interface using the same address as another previously-existing
| > > interface get discarded.
|
| Hi Christoph.
|
| I'm not seeing this problem with 2.2.6-ac1. It defaults to an rp_filter
| setting of zero, though. Has the default on the main-line (non-ac)
| kernels changed?
|
| Steve
|
+----[ End Quote ]---------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/