IP Aliasing a ipchains

[Leos Bitto]

David Trcka (trcka na poda.cz) wrote:
: -----BEGIN PGP SIGNED MESSAGE-----
: Hash: SHA1
: 
: On 22 Mar 2000 uhlar na fantomas.sk wrote:
: 
: > na jadrach 2.2/2.3 staci 
: > 
: >     if [ -e /proc/sys/net/ipv4/conf/all/rp_filter ]; then
: >         echo -n "Setting up IP spoofing protection..."
: >         for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
: >             echo 1 > $f
: >         done
: >         echo "done."
: >     fi
: > 
: Hmmmm, ono nestaci jenom /proc/sys/net/ipv4/conf/all/rp_filter ?

Ve spravnou chvili ano. Pozde uz ne. Vysvetlim: cokoliv je v
/proc/sys/net/ipv4/conf/all je brano jako hodnoty, ktere se nastavi
nove vzniklym sitovym rozhranim, ale nekopiruji se jiz zalozenym
sitovym rozhranim.


Leos Bitto