全部博文(52)
分类: LINUX
2008-11-26 23:20:00
accept_redirects for the interface will be enabled if
accept_redirects for the interface will be disabled otherwise.
Default: 1 (host), 0 (router).
二 accept_source_route
Accept packets with SRR option.
conf/all/accept_source_route must also be set to 1 to accept packets with SRR option on the interface.
Default: 1 (router), 0 (host).
三,arp_accept
Define behavior when gratuitous ARP replies are received:
四arp_announce
Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface:
The max value from conf/{all,interface}/arp_announce is used.
Increasing the restriction level gives more chance for receiving answer from the resolved target while decreasing the level announces more valid sender's information.
五arp_filter
arp_filter for the interface will be enabled if at least one of conf/{all,interface}/arp_filter is set to 1, it will be disabled otherwise.
六 arp_ignore
Define different modes for sending replies in response to received ARP requests that resolve local target IP addresses:
The max value from conf/{all,interface}/arp_ignore is used when ARP request is received on the {interface}.
七 bootp_relay
Accept packets with source address 0.b.c.d destined not to this host as local ones. It is supposed, that BOOTP relay daemon will catch and forward such packets.
conf/all/bootp_relay must also be set to 1 to enable BOOTP relay for the interface.
Default: 0
八 disable_policy
Disable IPSEC policy (SPD) for this interface
九 disable_xfrm
Disable IPSEC encryption on this interface, whatever the policy
十 force_igmp_version
Force IGMP protocol version.
十一 forwarding
Enable IP forwarding on this interface
十二 log_martians
Log packets with impossible addresses to kernel log.
log_martians for the interface will be enabled if at least one of conf/{all,interface}/log_martians is set to 1, it will be disabled otherwise
十三 mc_forwarding
Do multicast routing. The kernel needs to be compiled with CONFIG_IP_MROUTE and a multicast routing daemon is required.
conf/all/mc_forwarding must also be set to 1 to enable multicast routing for the interface.
十四 medium_id
Integer value used to differentiate the devices by the medium they are attached to. Two devices can have different id values when the broadcast packets are received only on one of them.
The default value 0 means that the device is the only interface to its medium, value of -1 means that medium is not known.
Currently, it is used to change the proxy_arp behavior: the proxy_arp feature is enabled for packets forwarded between two devices attached to different media.
十五 promote_secondaries
If this is enabled, and primary address of an interface gets deleted, an alias of the interface (secondary) will be upgraded to become primary.
The default is to purge all the secondaries when you delete the primary.
十六 proxy_arp
Do proxy ARP.
proxy_arp for the interface will be enabled if at least one of conf/{all,interface}/proxy_arp is set to 1, it will be disabled otherwise.
十七 rp_filter
conf/all/rp_filter must also be set to 1 to do source validation on the interface.
If you set this to 1 on a router that is the only connection for a network to the net, it will prevent spoofing attacks against your internal networks (external addresses can still be spoofed), without the need for additional firewall rules.
The default value is 0, but note that some distributions enable it in startup scripts.
十八 secure_redirects
Accept ICMP redirect messages only for gateways, listed in default gateway list.
secure_redirects for the interface will be enabled if at least one of conf/{all,interface}/secure_redirects is set to 1, it will be disabled otherwise.
Default: 1
十九 send_redirects
Send redirects, if router.
send_redirects for the interface will be enabled if at least one of conf/{all,interface}/send_redirects is set to 1, it will be disabled otherwise.
Default: 1
二十 shared_media
Send(router) or accept(host) RFC1620 shared media redirects. If it is not set the kernel does not assume that different subnets on this device can communicate directly. Overrides secure_redirects.
shared_media for the interface will be enabled if at least one of conf/{all,interface}/shared_media is set to 1, it will be disabled otherwise.
Default: 1
二十一 tag
Allows you to write a number, which can be used as required. The default value is 0.