diff options
author | Shan Wei <shanwei@cn.fujitsu.com> | 2009-12-02 18:39:04 -0500 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2009-12-02 18:39:04 -0500 |
commit | 1f5865e73fb18834f52bd6e1d27bce86ff372089 (patch) | |
tree | 8a265f3f2ef76bb757838f6f6abd9a6aaf79a7b6 /Documentation/networking | |
parent | 529fab67d78747ddc3a8a2bbd0d1aab1d059439f (diff) |
ip: update the description of rp_filter in ip-sysctl.txt
The commit 27fed4175acf81ddd91d9a4ee2fd298981f60295 (ip: fix logic of
reverse path filter sysctl) has changed the logic of rp_filter. The
document about rp_filter is out of date. Now, setting
conf/all/rp_filte with 0 can also enable source validation.
Update the document according to the commit.
Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation/networking')
-rw-r--r-- | Documentation/networking/ip-sysctl.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt index fbe427a6580c..5dcc06721bba 100644 --- a/Documentation/networking/ip-sysctl.txt +++ b/Documentation/networking/ip-sysctl.txt | |||
@@ -738,8 +738,8 @@ rp_filter - INTEGER | |||
738 | to prevent IP spoofing from DDos attacks. If using asymmetric routing | 738 | to prevent IP spoofing from DDos attacks. If using asymmetric routing |
739 | or other complicated routing, then loose mode is recommended. | 739 | or other complicated routing, then loose mode is recommended. |
740 | 740 | ||
741 | conf/all/rp_filter must also be set to non-zero to do source validation | 741 | The max value from conf/{all,interface}/rp_filter is used |
742 | on the interface | 742 | when doing source validation on the {interface}. |
743 | 743 | ||
744 | Default value is 0. Note that some distributions enable it | 744 | Default value is 0. Note that some distributions enable it |
745 | in startup scripts. | 745 | in startup scripts. |