projects / openwrt / staging / kaloz.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a35a27e) | patch
netfilter: add iptables-mod-rpfilter package
authorAlin Nastac <alin.nastac@gmail.com>
Fri, 16 Jun 2017 12:16:07 +0000 (14:16 +0200)
committerHans Dedecker <dedeckeh@gmail.com>
Tue, 11 Jul 2017 20:09:57 +0000 (22:09 +0200)
commitd8748e537f11ab5f2b5e2ed25d94baa5ce353984
tree8cdc9cb604c2d5ddfbd208f004c42553a55549dctree | snapshot
parenta35a27e8ef05b6536cf12b2938488be499859b76commit | diff
netfilter: add iptables-mod-rpfilter package

Unlike /proc/sys/net/ipv4/conf/INTF/rp_filter flag, rule iptables -t raw
-I PREROUTING -m rpfilter --invert -j DROP prevents conntrack table to
become full when a packet flood with randomly selected source IP addresses
is received from the lan side.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
include/netfilter.mk diff | blob | history
package/kernel/linux/modules/netfilter.mk diff | blob | history
package/network/utils/iptables/Makefile diff | blob | history
Staging tree of Imre Kaloz