[Security Firewall] Rp_filter and assymetric routing
"Dunlop, Sean" <Sean.Dunlop-s5/[email protected]> Tue, 21 Mar 2006 18:24:15 +0800
| Newsgroups | gmane.linux.mandrake.security.firewall |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format... ------------=_1142936602-21416-594 content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C64CD1.9B0F65D2" This is a multi-part message in MIME format. ------_=_NextPart_001_01C64CD1.9B0F65D2 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Is there an easy way to disable "rp_filter" on MNF2 I am using Zebra and BGPd to dynamically control multiple internet gateways and believe "rp_filter" is causing me problems with assymetric flow. I am using BGP to dynamically assign a prefered default gateway that will result in failover to a secondary default gateway in the event of an ISP outage. The nature of BGP is that some routing paths will inevitably result in looped or assymetric flow. Can 'rp_filter' be disabled per interface via the MNF2 gui, (or how can I do this at the OS level)? regards Sean Dunlop Network & Security Administrator Department of Treasury & Finance 200 St Georges Tce Perth Western Australia 6000 Ph - (618) 9262 1494 Mb - (618) [0]414 488 504 Email - sean.dunlop-s5/[email protected] Web - www.dtf.wa.gov.au This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. This email may not be copied, forwarded or disseminated without the prior authorisation of the author. ------_=_NextPart_001_01C64CD1.9B0F65D2 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version 6.0.6603.0"> <TITLE>Rp_filter and assymetric routing</TITLE> </HEAD> <BODY> <!-- Converted from text/rtf format --> <BR> <P><FONT SIZE=3D2 FACE=3D"Arial">Hi,</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">Is there an easy way to disable "rp_f= ilter" on MNF2</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">I am using Zebra and BGPd to dynamically c= ontrol multiple internet gateways and believe "rp_filter" is caus= ing me problems with assymetric flow.</FONT></P> <P><FONT SIZE=3D2 FACE=3D"Arial">I am using BGP to dynamically assign a pre= fered default gateway that will result in failover to a secondary default g= ateway in the event of an ISP outage.</FONT></P> <P><FONT SIZE=3D2 FACE=3D"Arial">The nature of BGP is that some routing pat= hs will inevitably result in looped or assymetric flow.</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">Can 'rp_filter' be disabled per interface = via the MNF2 gui, (or how can I do this at the OS level)?</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">regards</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Courier New">Sean Dunlop</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Courier New">Network & Security Administrator= </FONT> <BR><FONT SIZE=3D2 FACE=3D"Courier New">Department of Treasury & Financ= e</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Courier New">200 St Georges Tce</FONT> <BR><FONT SIZE=3D2 FACE=3D"Courier New">Perth Western Australia 6000</FONT> <BR><FONT SIZE=3D2 FACE=3D"Courier New">Ph - (618) 9262 1494</FONT> <BR><FONT SIZE=3D2 FACE=3D"Courier New">Mb - (618) [0]414 488 504</FONT> <BR><FONT SIZE=3D2 FACE=3D"Courier New">Email - sean.dunlop-s5/[email protected]</= FONT> <BR><FONT SIZE=3D2 FACE=3D"Courier">Web - </FONT><A HREF=3D"file://www.dtf.= wa.gov.au"><U><FONT COLOR=3D"#0000FF" SIZE=3D2 FACE=3D"Courier">www.dtf.wa.= gov.au</FONT></U></A> </P> <P><SPAN LANG=3D"en-au"><FONT COLOR=3D"#000000" FACE=3D"Times New Roman">Th= is email, and any files transmitted with it, is confidential and intended s= olely for the use of the individual or entity to whom it is addressed. This= email may not be copied, forwarded or disseminated without the prior autho= risation of the author</FONT><FONT FACE=3D"Times New Roman">.</FONT></SPAN>= <SPAN LANG=3D"en-us"></SPAN></P> <BR> </BODY> </HTML>= ------_=_NextPart_001_01C64CD1.9B0F65D2-- ------------=_1142936602-21416-594 Content-Type: text/plain; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: quoted-printable ____________________________________________________ Want to buy your Pack or Services from Mandriva?=20 Go to http://store.mandriva.com Join the Club : http://www.mandrivaclub.com ____________________________________________________ ------------=_1142936602-21416-594--