IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

Re: [Users] /proc/sys/net/ipv4/conf/ipsec0/rp_filter

From: Jeremiah Stanley (jeremiahstanley_at_attbi.com)
Date: Wed Mar 13 2002 - 01:53:38 CET

> Set it to zero as the message is saying:
> echo 0 > /proc/sys/net/ipv4/conf/ppp0/rp_filter
>
> Also check /etc/sysctl.conf, otherwise the default will take over
> again the next time the network is restarted.

# Enables packet forwarding
net.ipv4.ip_forward = 1

# Disables source route verification
net.ipv4.conf.default.rp_filter = 0

I have these entries in /etc/sysctl.conf that fix the errors you are
getting. sysctl is by far a more elegant way of setting kernel
variables, shell scripts run form /etc/rc.d/rc.local border on the
moniker of 'bizarre hack'. It is unfortunate that many firewall scripts
and IPSec tutorials rely on scripts instead of sysctl.

Jeremiah Stanley


_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:42 CEST