[Openswan Users] openswan 2.6.24rc4 pushed, please test!

Eray Aslan eray.aslan at caf.com.tr
Wed Dec 30 03:43:59 EST 2009


Paul,

On 29.12.2009 20:19, Paul Wouters wrote:
[...]
> /etc/sysctl.conf has
> 
> net.ipv4.ip_forward = 1
> net.ipv4.conf.default.rp_filter = 0

You might want to add/recommend
net.ipv4.conf.all.rp_filter = 0

rp_filter changed from logical AND to arithmetic MAX in kernel 2.6.31:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git;a=commitdiff;h=27fed4175acf81ddd91d9a4ee2fd298981f60295

-- 
Eray


More information about the Users mailing list