rc-scripts

Pawel Krawczyk kravietz at ceti.pl
Thu Oct 28 17:55:46 CEST 1999


Plik /etc/rc.d/init.d/functions.network
Linijka 206:

show "Setting up IP spoofing protection"; busy
if (for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 1 > $f; done); then
                                                          ^

W podkreślonym miejscu powinna być wartosć "2".

W /etc/sysconfig/network dodałbym jeszcze komentarz na temat
tej opcji:

# Do you want to enable IPv4 anti spoofing ?
IPV4_ANTI_SPOOFING=

Np.
# This makes sense only on routers, i.e. machines with multiple
# interfaces, and only if your routing is 100% symmetric. 

-- 
Pawel Krawczyk, CETI internet, Krakow. http://ceti.pl/~kravietz/



More information about the pld-devel-pl mailing list