From: Stephen Hemminger <shemminger@vyatta.com>
To: Herbert Xu <herbert@gondor.apana.org.au>
Cc: David Miller <davem@davemloft.net>, hawk@diku.dk, netdev@vger.kernel.org
Subject: Re: [PATCH] ip: add loose reverse path filtering
Date: Mon, 23 Feb 2009 13:46:46 -0800 [thread overview]
Message-ID: <20090223134646.655abc1a@extreme> (raw)
In-Reply-To: <20090222083436.GA1975@gondor.apana.org.au>
On Sun, 22 Feb 2009 16:34:36 +0800
Herbert Xu <herbert@gondor.apana.org.au> wrote:
> On Sat, Feb 21, 2009 at 11:56:01PM -0800, David Miller wrote:
> >
> > > Rather than extending the rp_filter stuff any further, I'd prefer
> > > to see this replaced with netfilter plugin.
> >
> > Normally I would agree, but in this case the cost is exactly
> > zero for the added flexibility.
>
> Ah I thought there was another patch coming :) But obviously as
> this is all that's needed for it sure it looks good to me too.
>
> Cheers,
Also, the purpose of reverse path filtering is to block Dos attacks.
So it is important to do any rejection with least overhead. If the
filter is iptables rules, it takes longer and requires another route
lookup.
prev parent reply other threads:[~2009-02-23 21:46 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-02-20 18:25 [PATCH] ip: add loose reverse path filtering Stephen Hemminger
2009-02-21 13:09 ` Herbert Xu
2009-02-22 7:56 ` David Miller
2009-02-22 8:34 ` Herbert Xu
2009-02-23 21:46 ` Stephen Hemminger [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20090223134646.655abc1a@extreme \
--to=shemminger@vyatta.com \
--cc=davem@davemloft.net \
--cc=hawk@diku.dk \
--cc=herbert@gondor.apana.org.au \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).