On Tue, 2011-09-06 at 19:45 +0200, Florian wrote: > > Thanks for your clarification. > However, shouldn't the kernel check if the corresponding package is a > DHCP Request and in this case skip the rp_filter as the source ip > address will most likely be invalid? Or is there some special > motivation for having rp_filter enabled for those packages as well?
You'll have to ask the kernel networking developers. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
