summaryrefslogtreecommitdiff
path: root/Documentation
diff options
context:
space:
mode:
authorDavid S. Miller <davem@sunset.davemloft.net>2005-10-03 16:07:30 -0700
committerDavid S. Miller <davem@sunset.davemloft.net>2005-10-03 16:07:30 -0700
commit7ce312467edc270fcbd8a699efabb37ce1802b98 (patch)
treefb267926db2239ddb815b6c5acd1be82ff56229c /Documentation
parent3e56a40bb36f1f73b4eac2ffe267c5357811e321 (diff)
downloadlinux-3.10-7ce312467edc270fcbd8a699efabb37ce1802b98.tar.gz
linux-3.10-7ce312467edc270fcbd8a699efabb37ce1802b98.tar.bz2
linux-3.10-7ce312467edc270fcbd8a699efabb37ce1802b98.zip
[IPV4]: Update icmp sysctl docs and disable broadcast ECHO/TIMESTAMP by default
It's not a good idea to be smurf'able by default. The few people who need this can turn it on. Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation')
-rw-r--r--Documentation/networking/ip-sysctl.txt10
1 files changed, 7 insertions, 3 deletions
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
index ab65714d95f..b433c8a27e2 100644
--- a/Documentation/networking/ip-sysctl.txt
+++ b/Documentation/networking/ip-sysctl.txt
@@ -355,10 +355,14 @@ ip_dynaddr - BOOLEAN
Default: 0
icmp_echo_ignore_all - BOOLEAN
+ If set non-zero, then the kernel will ignore all ICMP ECHO
+ requests sent to it.
+ Default: 0
+
icmp_echo_ignore_broadcasts - BOOLEAN
- If either is set to true, then the kernel will ignore either all
- ICMP ECHO requests sent to it or just those to broadcast/multicast
- addresses, respectively.
+ If set non-zero, then the kernel will ignore all ICMP ECHO and
+ TIMESTAMP requests sent to it via broadcast/multicast.
+ Default: 1
icmp_ratelimit - INTEGER
Limit the maximal rates for sending ICMP packets whose type matches