summaryrefslogtreecommitdiff
path: root/src/etc/sysctl.d
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-02-17 20:58:02 +0100
committerChristian Poessinger <christian@poessinger.com>2022-03-24 18:37:17 +0100
commit382d5aa16d81b745e522a14122b429750ee64789 (patch)
tree45119abc984c89d470ff2f6d37490d86445adfdc /src/etc/sysctl.d
parenta34e1b82089af0799a5a794706bf90e81d17f829 (diff)
downloadvyos-1x-382d5aa16d81b745e522a14122b429750ee64789.tar.gz
vyos-1x-382d5aa16d81b745e522a14122b429750ee64789.zip
openvpn: T4230: globally enable ip_nonlocal_bind
(cherry picked from commit 1cbcbf40b7721849f9696c05fac65db010a66b7c)
Diffstat (limited to 'src/etc/sysctl.d')
-rw-r--r--src/etc/sysctl.d/33-vyos-nonlocal-bind.conf8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/etc/sysctl.d/33-vyos-nonlocal-bind.conf b/src/etc/sysctl.d/33-vyos-nonlocal-bind.conf
new file mode 100644
index 000000000..aa81b5336
--- /dev/null
+++ b/src/etc/sysctl.d/33-vyos-nonlocal-bind.conf
@@ -0,0 +1,8 @@
+### Added by vyos-1x ###
+#
+# ip_nonlocal_bind - BOOLEAN
+# If set, allows processes to bind() to non-local IP addresses,
+# which can be quite useful - but may break some applications.
+# Default: 0
+net.ipv4.ip_nonlocal_bind = 1
+net.ipv6.ip_nonlocal_bind = 1