I'm still having the same problem packets arrive on one interface but
try to return on another interface(The default route)
The rp_filter option had been set to 1 I changed it to 0.
MArk
On Tue, 2002-01-15 at 16:16, Martin Feeney wrote:
> On Tue, 15 Jan 2002 15:10:18 Mark Kilmartin wrote:
>> > The only option which I can find in fwbuilder which may help with this
> > is Accept source route.
> > Can anybody explain what this option is and if it might help me.
> >
> > Or can anybody suggest another solution.
>> echo "0" >/proc/sys/net/ipv4/conf/all/rp_filter
>> This will turn off reverse path filtering. Substitute all with the
> interface in question if you know which one the route is being dumped at.
>> rp_filter - BOOLEAN
> 1 - do source validation by reversed path, as specified in RFC1812
> Recommended option for single homed hosts and stub network
> routers. Could cause troubles for complicated (not loop free)
> networks running a slow unreliable protocol (sort of RIP),
> or using static routes.
>> 0 - No source validation.
>> Default value is 0. Note that some distributions enable it
> in startip scripts.
>> Debian sets this to "1" by default for added security.
>> Add the following to /etc/sysctl.conf:
> net/ipv4/conf/all/rp_filter=0
>> Martin.
>> --
> Irish Linux Users' Group: ilug at linux.ie>http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
> List maintainer: listmaster at linux.ie
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!