mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2025-01-09 22:50:41 +00:00
ip: update the description of rp_filter in ip-sysctl.txt
The commit 27fed4175acf81ddd91d9a4ee2fd298981f60295 (ip: fix logic of reverse path filter sysctl) has changed the logic of rp_filter. The document about rp_filter is out of date. Now, setting conf/all/rp_filte with 0 can also enable source validation. Update the document according to the commit. Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
529fab67d7
commit
1f5865e73f
@ -738,8 +738,8 @@ rp_filter - INTEGER
|
||||
to prevent IP spoofing from DDos attacks. If using asymmetric routing
|
||||
or other complicated routing, then loose mode is recommended.
|
||||
|
||||
conf/all/rp_filter must also be set to non-zero to do source validation
|
||||
on the interface
|
||||
The max value from conf/{all,interface}/rp_filter is used
|
||||
when doing source validation on the {interface}.
|
||||
|
||||
Default value is 0. Note that some distributions enable it
|
||||
in startup scripts.
|
||||
|
Loading…
x
Reference in New Issue
Block a user