Package: procps
Version: 1:3.2.8-11
Severity: important

Dear Maintainer,

I have a vpn gateway that periodically sends icmp redirects to the hosts of my
network (when renegociating  tunnels), I configured hosts not to accepts
reidrects by uncommenting the default directive found in sysctl.conf:

net.ipv4.conf.all.accept_redirects = 0

after reboot here is the config i get in /proc/sys:
cat /proc/sys/net/ipv4/conf/*/accept_redirects
0
1
1
1
1

If i try to echo the value in the proc filesystem, It's no better:
root@elronde:/home/alxgomzecho 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
root@elronde:/home/alxgomz# cat /proc/sys/net/ipv4/conf/*/accept_redirects
0
1
1
1
1

Where I expected this to put all interfaces to zero.

the entry ./default/accept_redirects seems to work as expected.

I have seen the same behaviour for other proc entries such as send_redirects
and notices the bug #630650 that is maybe related.




-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.0.0-1-686-pae (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages procps depends on:
ii  initscripts   2.88dsf-13.11
ii  libc6         2.13-18      
ii  libncurses5   5.9-1        
ii  libncursesw5  5.9-1        
ii  lsb-base      3.2-28       

Versions of packages procps recommends:
ii  psmisc  22.13-1

procps suggests no packages.

-- Configuration Files:
/etc/sysctl.conf changed:
net.ipv4.conf.all.accept_redirects = 0


-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to