sysctl - net.ipv4.ip_forward & net.ipv4.conf.all.accept_redirects
Robert Sanders
rsanders at TrustedCS.com
Wed Dec 11 19:12:44 UTC 2013
More details on this. Chad H. pulled up the kernel source and it appears that there is specific code in net/ipv4/devinet.c when setting ip_forward that the accept_redirects field will be set opposite to ip_forward. Note that setting net.ipv4.conf.all.accept_redirects does not impact net.ipv4.ip_forward.
About the only reference to this behavior is the following:
http://lists.openwall.net/netdev/2013/08/09/29
-Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131211/20477856/attachment.html>
More information about the scap-security-guide
mailing list