install sysctl file set set rp_filter=2

[pve-firewall.git] / src / pve-firewall-sysctl.conf

diff --git a/src/pve-firewall-sysctl.conf b/src/pve-firewall-sysctl.conf
new file mode 100644 (file)
index 0000000..acd1f38
--- /dev/null
+++ b/src/pve-firewall-sysctl.conf
@@ -0,0 +1,3 @@
+# Enables source route verification
+net.ipv4.conf.all.rp_filter = 2
+