* [PATCH] ip: update the description of rp_filter in ip-sysctl.txt
@ 2009-12-01 7:04 Shan Wei
2009-12-02 23:39 ` David Miller
0 siblings, 1 reply; 2+ messages in thread
From: Shan Wei @ 2009-12-01 7:04 UTC (permalink / raw)
To: David Miller, shemminger; +Cc: netdev@vger.kernel.org, rdunlap
The commit 27fed4175acf81ddd91d9a4ee2fd298981f60295
(ip: fix logic of reverse path filter sysctl)has changed the logic of rp_filter.
The document about rp_filter is out of date. Now, setting conf/all/rp_filte with 0
can also enable source validation.
Update the document according to the commit.
Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com>
---
Documentation/networking/ip-sysctl.txt | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
index fbe427a..5dcc067 100644
--- a/Documentation/networking/ip-sysctl.txt
+++ b/Documentation/networking/ip-sysctl.txt
@@ -738,8 +738,8 @@ rp_filter - INTEGER
to prevent IP spoofing from DDos attacks. If using asymmetric routing
or other complicated routing, then loose mode is recommended.
- conf/all/rp_filter must also be set to non-zero to do source validation
- on the interface
+ The max value from conf/{all,interface}/rp_filter is used
+ when doing source validation on the {interface}.
Default value is 0. Note that some distributions enable it
in startup scripts.
--
1.6.3.3
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] ip: update the description of rp_filter in ip-sysctl.txt
2009-12-01 7:04 [PATCH] ip: update the description of rp_filter in ip-sysctl.txt Shan Wei
@ 2009-12-02 23:39 ` David Miller
0 siblings, 0 replies; 2+ messages in thread
From: David Miller @ 2009-12-02 23:39 UTC (permalink / raw)
To: shanwei; +Cc: shemminger, netdev, rdunlap
From: Shan Wei <shanwei@cn.fujitsu.com>
Date: Tue, 01 Dec 2009 15:04:32 +0800
> The commit 27fed4175acf81ddd91d9a4ee2fd298981f60295
> ^[$B!J^[(Bip: fix logic of reverse path filter sysctl^[$B!K^[(Bhas changed the logic of rp_filter.
> The document about rp_filter is out of date. Now, setting conf/all/rp_filte with 0
> can also enable source validation.
>
> Update the document according to the commit.
>
> Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com>
Patch applied, thank you.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2009-12-02 23:39 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-12-01 7:04 [PATCH] ip: update the description of rp_filter in ip-sysctl.txt Shan Wei
2009-12-02 23:39 ` David Miller
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).