Re: OS Platform for firewall (...the answer is..)

[Paul D. Robertson]

On Thu, 14 Jan 1999, Tom Yates wrote:

> and, before i drift too far off-topic, does anyone know how to get linux
> to reject source-routed packets?  any and all methods gratefully accepted.

It's a kernel configuration parameter:

IP: Drop source routed frames (CONFIG_IP_NOSR) [Y/n/?]

It's the default in most distributions I think (definitely RedHat), but the 
best way to ensure it's configured is to build yourself a new kernel.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."
                                                                     PSB#9280

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]