- added net.ipv4.conf.default.rp_filter=1 -- *.all.* has no real effect:

  when sysctl -p is run, interfaces are not up yet

svn-id: @5417

diff --git a/sysctl.conf b/sysctl.conf
index 7919579b3d3ea7ffe9cebb018192eb8d8ca6974a..8dc1a309967d8a70a24935021a499238c19d0781 100644 (file)
--- a/sysctl.conf
+++ b/sysctl.conf
@@ -5,6 +5,7 @@ net.ipv4.ip_forward = 0
 
 # Enables source route verification
 net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.default.rp_filter = 1
 
 # Accept ICMP redirect messages (suggested 1 for hosts and 0 for routers)
 # net.ipv4.conf.all.accept_redirects = 1