Kconfig help needs fixing?

Begin forwarded message:

Date: Sun, 7 Aug 2005 11:25:01 -0700
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Bugme-new] [Bug 5015] New: rp_filter documentation error in Kconfig


http://bugzilla.kernel.org/show_bug.cgi?id=5015

           Summary: rp_filter documentation error in Kconfig
    Kernel Version: 2.6  2.4
            Status: NEW
          Severity: low
             Owner: [EMAIL PROTECTED]
         Submitter: [EMAIL PROTECTED]


rp_filter is off by _kernel_ default.
(Some distibutions turn it on in startup scripts).

The folowing text from net/ipv4/Kconfig is confusing.(It seems one distribution 
maintainer thinks rp_filter is on by kernel default)

"config IP_ADVANCED_ROUTER
[..........]
If you turn on IP forwarding, you will also get the rp_filter, which
automatically rejects incoming packets if the routing table entry
for their source address doesn't match the network interface they're
arriving on. This has security advantages because it prevents the
so-called IP spoofing, however it can pose problems if you use
asymmetric routing (packets from you to a host take a different path
than packets from that host to you) or if you operate a non-routing
host which has several IP addresses on different interfaces. To turn
rp_filter off use:

echo 0 > /proc/sys/net/ipv4/conf/<device>/rp_filter
or
echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter"

In 2.4 the error is in Documentation/Configure/help. Please fix this too.

Thanks.

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to