rp_filter

[Stephen Frost <sfrost@snowman.net>]

[-- Attachment #1: Type: text/plain, Size: 949 bytes --]

Hey all,

  Can we *please* move the rp_filter cruft into the firewalling code
  proper?  I've had yet another friend come to me asking for help after
  fighting with his iptables setup for 6 hours trying to get it to work
  to discover the whole problem was rp_filter getting in the way.  If
  rp_filter was part of the actual firewalling code where it should be
  people wouldn't run into this stupid problem.

  rp_filter is an obscure option that only the poor souls who ran into
  it know about.  I've met people who have implemented it all by hand in
  iptables because they didn't know it existed, and then didn't entirely
  trust it.  The people who need the option (those who actually run
  routers or firewalls) know they need it and will take care of having
  it enabled in their firewalling code, for most people (desktop users 
  and whatnot) it's useless anyway because they've only got one
  interface.

  	Stephen

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]