Gentoo Archives: gentoo-commits

From: William Hubbs <williamh@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/baselayout:master commit in: etc.Linux/
Date: Tue, 30 Aug 2016 04:05:20
Message-Id: 1472529550.d32173ea399cc37837985dec55134d1e0e2ebf72.williamh@gentoo
1 commit: d32173ea399cc37837985dec55134d1e0e2ebf72
2 Author: William Hubbs <williamh <AT> gentoo <DOT> org>
3 AuthorDate: Tue Aug 30 03:59:10 2016 +0000
4 Commit: William Hubbs <williamh <AT> gentoo <DOT> org>
5 CommitDate: Tue Aug 30 03:59:10 2016 +0000
6 URL: https://gitweb.gentoo.org/proj/baselayout.git/commit/?id=d32173ea
7
8 etc.Linux/sysctl.comf: disable rp_filter by default
9
10 See https://lwn.net/Articles/578621/
11
12 X-Gentoo-Bug-URL: https://bugs.gentoo.org/show_bug.cgi?id=586210
13
14 etc.Linux/sysctl.conf | 4 ++--
15 1 file changed, 2 insertions(+), 2 deletions(-)
16
17 diff --git a/etc.Linux/sysctl.conf b/etc.Linux/sysctl.conf
18 index 08466bf..2f8b3b0 100644
19 --- a/etc.Linux/sysctl.conf
20 +++ b/etc.Linux/sysctl.conf
21 @@ -16,9 +16,9 @@ net.ipv4.ip_forward = 0
22 # Disable ECN
23 #net.ipv4.tcp_ecn = 0
24 # Enables source route verification
25 -net.ipv4.conf.default.rp_filter = 1
26 +#net.ipv4.conf.default.rp_filter = 1
27 # Enable reverse path
28 -net.ipv4.conf.all.rp_filter = 1
29 +#net.ipv4.conf.all.rp_filter = 1
30
31 # Enable SYN cookies (yum!)
32 # http://cr.yp.to/syncookies.html