3 Dec
2009
3 Dec
'09
3:07 p.m.
Hi, On Thu, 2009-12-03 at 14:55 +0100, Patrick McHardy wrote:
jamal wrote:
BTW, it should be noted that the change from Patrick to fib_validate which allows to accept local routes from will also solve this problem. My suggestion below is to restore old expected behavior..
Agreed, the accept_local sysctl should not be misused for this, otherwise TPROXY setups wouldn't have source validation anymore.
Absolutely agreed. Cheers, Krisztian