Re: IPTABLES do not work without ROUTE exist ?!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

kapetr a écrit :
> 
> http://ubuntuforums.org/showthread.php?t=1339951
> 
> What do You thing ?

I think that your box has sysctls net.ipv4.conf.*.rp_filter=1.
These settings enable reverse path filtering for source validation. If
rp_filter is enabled for an interface and the source address of an
incoming packet is not routed via the same interface (either via another
interface or no route), then the packet is dropped. This happens after
the PREROUTING chains and before the INPUT or FORWARD chains.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux