summaryrefslogtreecommitdiff
path: root/sysconf
diff options
context:
space:
mode:
authorStephen Hemminger <stephen.hemminger@vyatta.com>2008-05-13 17:15:38 -0700
committerStephen Hemminger <stephen.hemminger@vyatta.com>2008-05-13 17:15:38 -0700
commit2e368aaca62ca05330d613500772fe8d6aa11032 (patch)
treea522ca88236d4380cf1837f7b3c23f771c844347 /sysconf
parente7d2b737df1f6194af2c652923647dd57280d2df (diff)
downloadvyatta-cfg-system-2e368aaca62ca05330d613500772fe8d6aa11032.tar.gz
vyatta-cfg-system-2e368aaca62ca05330d613500772fe8d6aa11032.zip
Move sysctl configuration to /etc/vyatta-sysctl.conf
Change settings and move sysctl values to separate file /etc/vyatta-sysctl.conf. This allows for user/support to adjust configuration without changing the rl-system.init script.
Diffstat (limited to 'sysconf')
-rw-r--r--sysconf/vyatta-sysctl.conf23
1 files changed, 23 insertions, 0 deletions
diff --git a/sysconf/vyatta-sysctl.conf b/sysconf/vyatta-sysctl.conf
new file mode 100644
index 00000000..73c4c8ff
--- /dev/null
+++ b/sysconf/vyatta-sysctl.conf
@@ -0,0 +1,23 @@
+#
+# Vyatta router specific sysctl settings.
+# See sysctl.conf (5) for information.
+#
+
+# Only answer ARP requests on same subnet
+net.ipv4.conf.default.arp_filter=1
+
+# Enable packet forwarding for IPv4
+net.ipv4.ip_forward=1
+
+# if a primary address is removed from an interface promote the
+# secondary address if available
+net.ipv4.conf.all.promote_secondaries=1
+
+# Ignore ICMP broadcasts sent to broadcast/multicast
+net.ipv4.icmp_echo_ignore_broadcasts=1
+
+# Ignore bogus ICMP errors
+net.ipv4.icmp_ignore_bogus_error_responses=1
+
+# Send ICMP responses with primary address of exiting interface
+net.ipv4.icmp_errors_use_inbound_ifaddr=1