netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH] ip: update the description of rp_filter in ip-sysctl.txt
@ 2009-12-01  7:04 Shan Wei
  2009-12-02 23:39 ` David Miller
  0 siblings, 1 reply; 2+ messages in thread
From: Shan Wei @ 2009-12-01  7:04 UTC (permalink / raw)
  To: David Miller, shemminger; +Cc: netdev@vger.kernel.org, rdunlap

The commit 27fed4175acf81ddd91d9a4ee2fd298981f60295
(ip: fix logic of reverse path filter sysctl)has changed the logic of rp_filter.
The document about rp_filter is out of date. Now, setting conf/all/rp_filte with 0 
can also enable source validation.  

Update the document according to the commit.

Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com>
---
 Documentation/networking/ip-sysctl.txt |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
index fbe427a..5dcc067 100644
--- a/Documentation/networking/ip-sysctl.txt
+++ b/Documentation/networking/ip-sysctl.txt
@@ -738,8 +738,8 @@ rp_filter - INTEGER
 	to prevent IP spoofing from DDos attacks. If using asymmetric routing
 	or other complicated routing, then loose mode is recommended.
 
-	conf/all/rp_filter must also be set to non-zero to do source validation
-	on the interface
+	The max value from conf/{all,interface}/rp_filter is used
+	when doing source validation on the {interface}.
 
 	Default value is 0. Note that some distributions enable it
 	in startup scripts.
-- 
1.6.3.3


^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [PATCH] ip: update the description of rp_filter in ip-sysctl.txt
  2009-12-01  7:04 [PATCH] ip: update the description of rp_filter in ip-sysctl.txt Shan Wei
@ 2009-12-02 23:39 ` David Miller
  0 siblings, 0 replies; 2+ messages in thread
From: David Miller @ 2009-12-02 23:39 UTC (permalink / raw)
  To: shanwei; +Cc: shemminger, netdev, rdunlap

From: Shan Wei <shanwei@cn.fujitsu.com>
Date: Tue, 01 Dec 2009 15:04:32 +0800

> The commit 27fed4175acf81ddd91d9a4ee2fd298981f60295
> ^[$B!J^[(Bip: fix logic of reverse path filter sysctl^[$B!K^[(Bhas changed the logic of rp_filter.
> The document about rp_filter is out of date. Now, setting conf/all/rp_filte with 0 
> can also enable source validation.  
> 
> Update the document according to the commit.
> 
> Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com>

Patch applied, thank you.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2009-12-02 23:39 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-12-01  7:04 [PATCH] ip: update the description of rp_filter in ip-sysctl.txt Shan Wei
2009-12-02 23:39 ` David Miller

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).