diff options
| author | David S. Miller <davem@sunset.davemloft.net> | 2005-10-03 16:07:30 -0700 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2005-10-03 16:07:30 -0700 |
| commit | 7ce312467edc270fcbd8a699efabb37ce1802b98 (patch) | |
| tree | fb267926db2239ddb815b6c5acd1be82ff56229c /Documentation/networking | |
| parent | 3e56a40bb36f1f73b4eac2ffe267c5357811e321 (diff) | |
| download | lwn-7ce312467edc270fcbd8a699efabb37ce1802b98.tar.gz lwn-7ce312467edc270fcbd8a699efabb37ce1802b98.zip | |
[IPV4]: Update icmp sysctl docs and disable broadcast ECHO/TIMESTAMP by default
It's not a good idea to be smurf'able by default.
The few people who need this can turn it on.
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation/networking')
| -rw-r--r-- | Documentation/networking/ip-sysctl.txt | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt index ab65714d95fc..b433c8a27e2d 100644 --- a/Documentation/networking/ip-sysctl.txt +++ b/Documentation/networking/ip-sysctl.txt @@ -355,10 +355,14 @@ ip_dynaddr - BOOLEAN Default: 0 icmp_echo_ignore_all - BOOLEAN + If set non-zero, then the kernel will ignore all ICMP ECHO + requests sent to it. + Default: 0 + icmp_echo_ignore_broadcasts - BOOLEAN - If either is set to true, then the kernel will ignore either all - ICMP ECHO requests sent to it or just those to broadcast/multicast - addresses, respectively. + If set non-zero, then the kernel will ignore all ICMP ECHO and + TIMESTAMP requests sent to it via broadcast/multicast. + Default: 1 icmp_ratelimit - INTEGER Limit the maximal rates for sending ICMP packets whose type matches |