From: Jay Vosburgh <jay.vosburgh@canonical.com>
To: lartc@vger.kernel.org
Subject: Re: rp_filter
Date: Fri, 13 Jul 2018 16:26:27 +0000 [thread overview]
Message-ID: <6814.1531499187@nyx> (raw)
In-Reply-To: <1531495407677.43982@datavoiceint.com>
Grant Taylor <gtaylor@tnetconsulting.net> wrote:
>On 07/13/2018 09:23 AM, Leroy Tennison wrote:
>> Is there a definitive way to tell that rp_filter is dropping traffic (in
>> this case echo request) other than disabling it and seeing the expected
>> traffic (echo reply)? I tried an iptables packet trace but I either did
>> it wrong or it showed nothing. The only indications I have right now
>> are:
>
>Check dmesg. That's the most reliable place I've seen for logs about (so
>called) "martian" packets.
I believe they're also counted in the "in_martian_src" column of
/proc/net/stat/rt_cache.
-J
>> No firewall rules blocking traffic but no replies either.
>
>It seems like reverse path filtering operates at a lower layer before
>IPTables.
>
>> The problem is subnet-specific (only occurs on a directly-connected
>> subnet).
>
>Odd.
>
>
>
>--
>Grant. . . .
>unix || die
---
-Jay Vosburgh, jay.vosburgh@canonical.com
next prev parent reply other threads:[~2018-07-13 16:26 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-07-13 15:23 rp_filter Leroy Tennison
2018-07-13 16:23 ` rp_filter Grant Taylor
2018-07-13 16:26 ` Jay Vosburgh [this message]
2018-07-13 18:03 ` rp_filter Leroy Tennison
2018-09-04 10:11 ` rp_filter Anton Danilov
-- strict thread matches above, loose matches on Subject: below --
2002-12-27 21:11 rp_filter Stephen Frost
2002-12-28 8:46 ` rp_filter Patrick Schaaf
2002-12-29 17:28 ` rp_filter Stephen Frost
2002-12-28 9:17 ` rp_filter Patrick Schaaf
2003-01-08 12:38 ` rp_filter Roberto Nibali
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6814.1531499187@nyx \
--to=jay.vosburgh@canonical.com \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.