Hello,

On Thu, Sep 29, 2011 at 10:24:36PM +0200, Alexandre Chapellon wrote:
> Package: linux-2.6
> Version: 3.0.0-3
> Severity: normal
>
> Dear Maintainer,
>
> I have a vpn gateway that periodically sends icmp redirects to the hosts of my
> network (when renegociating tunnels), I configured hosts not to accepts
> reidrects by uncommenting the default directive found in sysctl.conf:
>
> net.ipv4.conf.all.accept_redirects = 0
>
> after reboot here is the config i get in /proc/sys:
> cat /proc/sys/net/ipv4/conf/*/accept_redirects
> 0
> 1
> 1
> 1
> 1
there is a misconception. IMHO a better name for "all" would be
"global". See
http://thread.gmane.org/gmane.linux.network/182279/focus=186917 for a
thread with a report of the same issue.

In short, "default" is used to initialize the settings for new devices,
and when I looked into that "all" was only used for configuring if ip
forwarding is enabled.

Best regards
Uwe

--
Pengutronix e.K. | Uwe Kleine-König |
Industrial Linux Solutions | http://www.pengutronix.de/ |



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20120629072117.GB12019@pengutronix.de">http://lists.debian.org/20120629072117.GB12019@pengutronix.de