Hello, On Thu, Sep 29, 2011 at 10:24:36PM +0200, Alexandre Chapellon wrote: > Package: linux-2.6 > Version: 3.0.0-3 > Severity: normal > > Dear Maintainer, > > I have a vpn gateway that periodically sends icmp redirects to the hosts of my > network (when renegociating tunnels), I configured hosts not to accepts > reidrects by uncommenting the default directive found in sysctl.conf: > > net.ipv4.conf.all.accept_redirects = 0 > > after reboot here is the config i get in /proc/sys: > cat /proc/sys/net/ipv4/conf/*/accept_redirects > 0 > 1 > 1 > 1 > 1 there is a misconception. IMHO a better name for "all" would be "global". See http://thread.gmane.org/gmane.linux.network/182279/focus=186917 for a thread with a report of the same issue.
In short, "default" is used to initialize the settings for new devices, and when I looked into that "all" was only used for configuring if ip forwarding is enabled. Best regards Uwe -- Pengutronix e.K. | Uwe Kleine-König | Industrial Linux Solutions | http://www.pengutronix.de/ | -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org