holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Replace 'proxy_arp' with 'rp_filter'

Browse Source
This commit is contained in:
Tom Eastep 2009-12-20 07:37:30 -08:00
parent 68c0a753d0
commit 586e6ea1ff
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Shorewall/known_problems.txt
View File

@ -1,12 +1,12 @@
1) In kernel 2.6.31, the handling of the rp_filter interface option was 1) In kernel 2.6.31, the handling of the rp_filter interface option was
changed incompatibly. Previously, the effective value was determined changed incompatibly. Previously, the effective value was determined
by the setting of net.ipv4.config.dev.proxy_arp logically ANDed with by the setting of net.ipv4.config.dev.rp_filter logically ANDed with
the setting of net.ipv4.config.all.proxy_arp. the setting of net.ipv4.config.all.rp_filter.
Beginning with kernel 2.6.31, the value is the arithmetic MAX of Beginning with kernel 2.6.31, the value is the arithmetic MAX of
those two values. those two values.
Given that Shorewall sets net.ipv4.config.all.proxy_arp to 1 if Given that Shorewall sets net.ipv4.config.all.rp_filter to 1 if
there are any interfaces specifying 'routefilter', specifying there are any interfaces specifying 'routefilter', specifying
'routefilter' on any interface has the effect of setting the option 'routefilter' on any interface has the effect of setting the option
on all interfaces. on all interfaces.

4
Shorewall/releasenotes.txt
View File

@ -174,8 +174,8 @@ Shorewall 4.4.5 Patch Release 1.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
1) In kernel 2.6.31, the handling of the rp_filter interface option was 1) In kernel 2.6.31, the handling of the rp_filter interface option was
chan ged incompatibly. Previously, the effective value was determined chan ged incompatibly. Previously, the effective value was determined
by the setting of net.ipv4.config.dev.proxy_arp logically ANDed with by the setting of net.ipv4.config.dev.rp_filter logically ANDed with
the setting of net.ipv4.config.all.proxy_arp. the setting of net.ipv4.config.all.rp_filter.
Beginning with kernel 2.6.31, the value is the arithmetic MAX of Beginning with kernel 2.6.31, the value is the arithmetic MAX of
those two values. those two values.