Re: NAT and netfilter (appology, thanks, and correction)

[David S. Miller]

   From: "Trever Adams" <[e-mail]>
   Date:   Sun, 02 Jan 2000 04:59:16 MST

   My worry is since my box will now forward to the private network,
   how do I keep people from doing source routing and routing packets
   onto my machine...

The kernel drops source routed frames based upon sysctl settings
under "/proc/sys/net/ipv4/conf/{all,default,...}/accept_source_route

Set it to "0" for interfaces you'd like source routes to be rejected
upon, or just set it under ipv4/conf/all/ to reject them everywhere
(this is the default).

Later,
David S. Miller
[e-mail]