From: Mogens Valentin <monz@danbbs.dk>
To: Daniel Chemko <dchemko@smgtec.com>
Cc: "António Godinho" <to@mail.isec.pt>, netfilter@lists.netfilter.org
Subject: Re: Various questions
Date: Mon, 28 Jul 2003 23:50:01 +0200 [thread overview]
Message-ID: <3F259A89.7D9CC24F@danbbs.dk> (raw)
In-Reply-To: 7C9884991ADAE0479C14F10C858BCDF5122E0D@alderaan.smgtec.com
Daniel Chemko wrote:
>
>
> > Is it possible to DROP all those IP's in one rule? ( I don't
> >need to log them since they are invalid anyway )
>
> Ideally this is done for you with /proc/sys/net/ipv4/conf/*/rp_filter == 1 or 2.
Do note that the rp_filter code will check only for zero (0) or
non-zero.
It changed sometime in the kernel 2.2 tree. Up until that point we could
use 1,2, or 3 to achieve ingress, egress or both. Nowadays it'll do
ingress and egress when using any non-zero value.
--
Kind regards / venlig hilsen,
Mogens Valentin, Mr Dev
IT Networking, Security, Server Setup
www.danbbs.dk/~monz mrdev@danbbs.dk
Phone +45 32 525 878 Cell 51 227 668
next prev parent reply other threads:[~2003-07-28 21:50 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-07-28 15:36 Various questions Daniel Chemko
2003-07-28 15:47 ` António Godinho
2003-07-28 21:50 ` Mogens Valentin [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-07-28 15:59 Daniel Chemko
2003-07-28 14:14 António Godinho
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3F259A89.7D9CC24F@danbbs.dk \
--to=monz@danbbs.dk \
--cc=dchemko@smgtec.com \
--cc=netfilter@lists.netfilter.org \
--cc=to@mail.isec.pt \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox