set rp_filter to mode 2

[vzctl.git] / debian / sysctl

diff --git a/debian/sysctl b/debian/sysctl
index 364fdcf2b5fd9153b435835239a48ec2ced150bf..87d5f4cd94c9283147941182dcba3f41f7045f38 100644 (file)
--- a/debian/sysctl
+++ b/debian/sysctl
@@ -6,7 +6,7 @@ net.ipv4.conf.default.forwarding=1
 net.ipv4.conf.default.proxy_arp = 0
 
 # Enables source route verification
-net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.all.rp_filter = 2
 
 # Enables the magic-sysrq key
 kernel.sysrq = 1