Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1f5865e7 authored by Shan Wei's avatar Shan Wei Committed by David S. Miller
Browse files

ip: update the description of rp_filter in ip-sysctl.txt



The commit 27fed417 (ip: fix logic of
reverse path filter sysctl) has changed the logic of rp_filter.  The
document about rp_filter is out of date. Now, setting
conf/all/rp_filte with 0 can also enable source validation.

Update the document according to the commit.

Signed-off-by: default avatarShan Wei <shanwei@cn.fujitsu.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 529fab67
Loading
Loading
Loading
Loading
+2 −2
Original line number Diff line number Diff line
@@ -738,8 +738,8 @@ rp_filter - INTEGER
	to prevent IP spoofing from DDos attacks. If using asymmetric routing
	or other complicated routing, then loose mode is recommended.

	conf/all/rp_filter must also be set to non-zero to do source validation
	on the interface
	The max value from conf/{all,interface}/rp_filter is used
	when doing source validation on the {interface}.

	Default value is 0. Note that some distributions enable it
	in startup scripts.