On 03/19/2019 05:45 AM, Stephen Suryaputra wrote:
> IPv4 has icmp_echo_ignore_broadcast to prevent responding to broadcast pings.
> IPv6 needs a similar mechanism.
>
...
> diff --git a/include/uapi/linux/sysctl.h b/include/uapi/linux/sysctl.h
> index 87aa2a6d9125..bd83ddedc014 100644
> --- a/include/uapi/linux/sysctl.h
> +++ b/include/uapi/linux/sysctl.h
> @@ -577,7 +577,8 @@ enum {
> /* /proc/sys/net/ipv6/icmp */
> enum {
> NET_IPV6_ICMP_RATELIMIT = 1,
> - NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2
> + NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2,
> + NET_IPV6_ICMP_ECHO_IGNORE_MULTICAST = 3
> };
>
> /* /proc/sys/net/<protocol>/neigh/<dev> */
This part is probably not needed.
