Alin Nastac c86490605c netfilter: add iptables-mod-rpfilter package
Unlike /proc/sys/net/ipv4/conf/INTF/rp_filter flag, rule iptables -t raw
-I PREROUTING -m rpfilter --invert -j DROP prevents conntrack table to
become full when a packet flood with randomly selected source IP addresses
is received from the lan side.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
(cherry picked from commit d8748e537f11ab5f2b5e2ed25d94baa5ce353984)
2017-12-13 16:23:38 +01:00
..
2016-12-16 22:39:22 +01:00
2017-03-01 20:37:36 +01:00
2017-03-01 20:37:37 +01:00
2016-12-16 22:39:22 +01:00
2016-12-16 22:39:22 +01:00
2017-12-13 15:31:27 +01:00
2017-03-25 14:55:10 +01:00
2017-01-10 13:01:26 +01:00
2016-10-26 15:16:51 +02:00