sysctl - net.ipv4.ip_forward & net.ipv4.conf.all.accept_redirects

Robert Sanders rsanders at TrustedCS.com
Wed Dec 11 19:12:44 UTC 2013


More details on this.  Chad H. pulled up the kernel source and it appears that there is specific code in net/ipv4/devinet.c when setting ip_forward that the accept_redirects field will be set opposite to ip_forward.  Note that setting net.ipv4.conf.all.accept_redirects does not impact net.ipv4.ip_forward.

About the only reference to this behavior is the following:
  http://lists.openwall.net/netdev/2013/08/09/29

-Rob

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131211/20477856/attachment.html>


More information about the scap-security-guide mailing list