| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20120630.223943.43292530650353283.davem@davemloft.net> Date: Sat, 30 Jun 2012 22:39:43 -0700 (PDT) From: David Miller <davem@...emloft.net> To: ja@....bg Cc: netdev@...r.kernel.org Subject: Re: [PATCH] ipv4: Elide fib_validate_source() completely when possible. From: Julian Anastasov <ja@....bg> Date: Sat, 30 Jun 2012 13:45:52 +0300 (EEST) > If we really want a change in behavior we should > at least update the accept_local info in > Documentation/networking/ip-sysctl.txt ? Thanks for pointing this out, that's what I will do. ==================== ipv4: Clarify in docs that accept_local requires rp_filter. Signed-off-by: David S. Miller <davem@...emloft.net> --- Documentation/networking/ip-sysctl.txt | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt index 99d0e05..47b6c79 100644 --- a/Documentation/networking/ip-sysctl.txt +++ b/Documentation/networking/ip-sysctl.txt @@ -857,9 +857,14 @@ accept_source_route - BOOLEAN FALSE (host) accept_local - BOOLEAN - Accept packets with local source addresses. In combination with - suitable routing, this can be used to direct packets between two - local interfaces over the wire and have them accepted properly. + Accept packets with local source addresses. In combination + with suitable routing, this can be used to direct packets + between two local interfaces over the wire and have them + accepted properly. + + rp_filter must be set to a non-zero value in order for + accept_local to have an effect. + default FALSE route_localnet - BOOLEAN -- 1.7.10.4 -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists