[Tfug] rp_filter

ewf erich at dakotacom.net
Fri Jul 30 19:00:27 MST 2004


      I have Woody 3.0 in this machine and I want to make it more 
secure. I want
to add on startup:

          #! /bin/sh
         echo -n "enabling source address varification  ..."
         echo 1 >  /proc/sys/net/ipv4/conf/default/rp_filter
         echo "done"

      This has to be done before any network devices are enabled. I 
think I can add
this to:

         /etc/init.d/bootmisc.sh

But I'm not so sure. For openers bootmisc.sh doesn't look like it's 
written in
the same script language as /bin/sh, and then it looks like network 
devices are
enabled before we execute this script. Is there a better place to add 
this code?


                                                                        
                                                        Cheers,
                                                                        
                                                        Erich




More information about the tfug mailing list