From 2e368aaca62ca05330d613500772fe8d6aa11032 Mon Sep 17 00:00:00 2001 From: Stephen Hemminger Date: Tue, 13 May 2008 17:15:38 -0700 Subject: Move sysctl configuration to /etc/vyatta-sysctl.conf Change settings and move sysctl values to separate file /etc/vyatta-sysctl.conf. This allows for user/support to adjust configuration without changing the rl-system.init script. --- sysconf/vyatta-sysctl.conf | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 sysconf/vyatta-sysctl.conf (limited to 'sysconf') diff --git a/sysconf/vyatta-sysctl.conf b/sysconf/vyatta-sysctl.conf new file mode 100644 index 00000000..73c4c8ff --- /dev/null +++ b/sysconf/vyatta-sysctl.conf @@ -0,0 +1,23 @@ +# +# Vyatta router specific sysctl settings. +# See sysctl.conf (5) for information. +# + +# Only answer ARP requests on same subnet +net.ipv4.conf.default.arp_filter=1 + +# Enable packet forwarding for IPv4 +net.ipv4.ip_forward=1 + +# if a primary address is removed from an interface promote the +# secondary address if available +net.ipv4.conf.all.promote_secondaries=1 + +# Ignore ICMP broadcasts sent to broadcast/multicast +net.ipv4.icmp_echo_ignore_broadcasts=1 + +# Ignore bogus ICMP errors +net.ipv4.icmp_ignore_bogus_error_responses=1 + +# Send ICMP responses with primary address of exiting interface +net.ipv4.icmp_errors_use_inbound_ifaddr=1 -- cgit v1.2.3