From: Mogens Valentin <monz@danbbs.dk>
To: Daniel Chemko <dchemko@smgtec.com>
Cc: "António Godinho" <to@mail.isec.pt>, netfilter@lists.netfilter.org
Subject: Re: Various questions
Date: Mon, 28 Jul 2003 23:50:01 +0200 [thread overview]
Message-ID: <3F259A89.7D9CC24F@danbbs.dk> (raw)
In-Reply-To: 7C9884991ADAE0479C14F10C858BCDF5122E0D@alderaan.smgtec.com
Daniel Chemko wrote:
>
>
> > Is it possible to DROP all those IP's in one rule? ( I don't
> >need to log them since they are invalid anyway )
>
> Ideally this is done for you with /proc/sys/net/ipv4/conf/*/rp_filter == 1 or 2.
Do note that the rp_filter code will check only for zero (0) or
non-zero.
It changed sometime in the kernel 2.2 tree. Up until that point we could
use 1,2, or 3 to achieve ingress, egress or both. Nowadays it'll do
ingress and egress when using any non-zero value.
--
Kind regards / venlig hilsen,
Mogens Valentin, Mr Dev
IT Networking, Security, Server Setup
www.danbbs.dk/~monz mrdev@danbbs.dk
Phone +45 32 525 878 Cell 51 227 668
next prev parent reply other threads:[~2003-07-28 21:50 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-07-28 15:36 Various questions Daniel Chemko
2003-07-28 15:47 ` António Godinho
2003-07-28 21:50 ` Mogens Valentin [this message]
-- strict thread matches above, loose matches on Subject: below --
2011-01-07 17:15 Various Questions Carl Cook
2011-01-07 17:37 ` C Anthony Risinger
2011-01-07 17:41 ` Freddie Cash
2011-01-07 18:55 ` Carl Cook
2011-01-08 13:25 ` Carl Cook
2011-01-08 15:40 ` Ian! D. Allen
2011-01-09 1:26 ` Freddie Cash
2011-01-09 13:16 ` Carl Cook
2011-01-09 13:37 ` Fajar A. Nugraha
2011-01-09 13:58 ` Alan Chandler
2003-07-28 15:59 Various questions Daniel Chemko
2003-07-28 14:14 António Godinho
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3F259A89.7D9CC24F@danbbs.dk \
--to=monz@danbbs.dk \
--cc=dchemko@smgtec.com \
--cc=netfilter@lists.netfilter.org \
--cc=to@mail.isec.pt \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.