tree 012f502d50cf65ea0100b5776d13d376fe13989a
parent 3f8b40d3001f38302e6eea3db97266f221279c36
author Vernon Mauery <vernon.mauery@linux.intel.com> 1555102612 -0700
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1556286030 +0000

Enable reverse-path filter for IPv4

/proc/sys/net/ipv4/conf/*/rp_filter enforces filtering of packets to
make sure that only packets that match the route can be sent on an
interface. This is recommended for reducing IP spoofing as will as
allowing for proper UDP behavior when multiple configured NICs have the
same subnet.

This is needed for the upcoming change of phosphor-ipmi-net, were its
socket file uses the bind-to-device option to be able to bind each
instance to a single network interface.  This allows each RMCP+ bridge
to accept only incoming packets on that interface. But in order to do
this with two NICs on the same subnet, reverse-path filtering must be
enabled in the kernel.

Change-Id: Iaae5783f8d30d8fc524ef3e19e776c75fe25bbfd
Signed-off-by: Vernon Mauery <vernon.mauery@linux.intel.com>