Source Routing Protection

MrUnix · 04-04-2013, 01:37 AM

Does anybody know the difference (if there is any) between explicilty dropping internal IPs on an external interface versus the rp_filter kernel parameter?

EDIT: The title of this thread should read "Reverse Path Filtering".

acid_kewpie · 04-04-2013, 02:24 AM

well ones implicit and ones explicitly defined in an iptables chain. your iptables entries can be wrong. And there is a possibility of a complex suystem having knowingly asymmetric routes, which rp_filter may well take issue with, whereas you can craft iptabels rules to suit the needs you're aware of.

MrUnix · 04-04-2013, 02:25 AM

Thanks for the information.