|
Firewalls (March 1994) |
By default, a Sun with only a single interface will not forward an IP packet. /sys/netinet/in_proto.c has suitable comments to explain what the variable ip_forwarding means. Essentially it will only forward packets if the value is >0, and it will be 0 is there is only one interface. options IPFORWARDING=-1 in the configuration file (in /sys/`uname -m`/conf) will ensure that it will never forward a packet, even if you add another interface. Icarus Follow-Ups:
|