tree 78b6248ee7f1e2a50839ea43602d608e7f584301
parent d942b7a7f9216ae16288fdc77923b83ee5ade84d
author Vernon Mauery <vernon.mauery@linux.intel.com> 1555102612 -0700
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1556554543 -0400

Enable reverse-path filter for IPv4

/proc/sys/net/ipv4/conf/*/rp_filter enforces filtering of packets to
make sure that only packets that match the route can be sent on an
interface. This is recommended for reducing IP spoofing as will as
allowing for proper UDP behavior when multiple configured NICs have the
same subnet.

This is needed for the upcoming change of phosphor-ipmi-net, were its
socket file uses the bind-to-device option to be able to bind each
instance to a single network interface.  This allows each RMCP+ bridge
to accept only incoming packets on that interface. But in order to do
this with two NICs on the same subnet, reverse-path filtering must be
enabled in the kernel.

(From meta-phosphor rev: 62a4b6cde3046a2439bdcef79a6ac85fd6684194)

Change-Id: Ia4ba2523ded0d18d99f8be2fedd42666e96c34d2
Signed-off-by: Vernon Mauery <vernon.mauery@linux.intel.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>