patch-2.1.102 linux/Documentation/networking/ip-sysctl.txt
Next file: linux/Documentation/networking/policy-routing.txt
Previous file: linux/Documentation/joystick.txt
Back to the patch index
Back to the overall index
- Lines: 220
- Date:
Thu May 14 10:26:22 1998
- Orig file:
v2.1.101/linux/Documentation/networking/ip-sysctl.txt
- Orig date:
Sat May 2 14:19:51 1998
diff -u --recursive --new-file v2.1.101/linux/Documentation/networking/ip-sysctl.txt linux/Documentation/networking/ip-sysctl.txt
@@ -1,8 +1,10 @@
-/proc/sys/net/ipv4/* variables:
+/proc/sys/net/ipv4/* Variables:
-ip_forwarding - "SNMP" BOOLEAN
- 2 - disabled (default)
- 1 - enabled
+ip_forward - BOOLEAN
+ 0 - disabled (default)
+ not 0 - enabled
+
+ Forward Packets between interfaces.
This variable is special, its change resets all configuration
parameters to their default state (RFC1122 for hosts, RFC1812
@@ -11,32 +13,11 @@
ip_default_ttl - INTEGER
default 64
-ip_log_martians - BOOLEAN
- log packets with strange or impossible addresses.
- default TRUE (router)
- FALSE (host)
-
-ip_accept_redirects - BOOLEAN
- Accept ICMP redirect messages.
- default TRUE (host)
- FALSE (router)
-
-ip_secure_redirects - BOOLEAN
- Accept ICMP redirect messages only for gateways,
- listed in default gateway list.
- default TRUE
-
ip_addrmask_agent - BOOLEAN
Reply to ICMP ADDRESS MASK requests.
default TRUE (router)
FALSE (host)
-ip_rfc1620_redirects - BOOLEAN
- Send(router) or accept(host) RFC1620 shared media redirects.
- Overrides ip_secure_redirects.
- default TRUE (should be FALSE for distributed version,
- but I use it...)
-
ip_bootp_agent - BOOLEAN
Accept packets with source address of sort 0.b.c.d
and destined to this host, broadcast or multicast.
@@ -44,46 +25,10 @@
default FALSE
-ip_bootp_relay - BOOLEAN
- Accept packets with source address 0.b.c.d destined
- not to this host as local ones. It is supposed, that
- BOOTP relay deamon will catch and forward such packets.
-
- default FALSE
- Not Implemented Yet.
-
-
-ip_source_route - BOOLEAN
- Accept packets with SRR option.
- default TRUE (router)
- FALSE (host)
-
-
ip_no_pmtu_disc - BOOLEAN
Disable Path MTU Discovery.
default FALSE
-ip_rfc1812_filter - INTEGER
- 2 - do source validation by reversed path, as specified in RFC1812
- Recommended option for single homed hosts and stub network
- routers. Could cause troubles for complicated (not loop free)
- networks running a slow unreliable protocol (sort of RIP),
- or using static routes.
-
- 1 - (DEFAULT) Weaker form of RP filtering: drop all the packets
- that look as sourced at a directly connected interface, but
- were input from another interface.
-
- 0 - No source validation.
-
- NOTE: do not disable this option! All BSD derived routing software
- (sort of gated, routed etc. etc.) is confused by such packets,
- even if they are valid.
-
- NOTE: this option is turned on per default only when ip_forwarding
- is on. For non-forwarding hosts it doesn't make much sense and
- makes some legal multihoming configurations impossible.
-
ip_fib_model - INTEGER
0 - (DEFAULT) Standard model. All routes are in class MAIN.
1 - default routes go to class DEFAULT. This mode should
@@ -125,6 +70,7 @@
tcp_max_delay_acks - INTEGER
tcp_fin_timeout - INTEGER
tcp_max_ka_probes - INTEGER
+tcp_hoe_retransmits - INTEGER
Undocumented for now.
tcp_syncookies - BOOLEAN
@@ -143,6 +89,20 @@
tcp_max_syn_backlog - INTEGER
Undocumented (work in progress)
+tcp_window_scaling - BOOLEAN
+ Enable window scaling as defined in RFC1323.
+
+tcp_timestamps - BOOLEAN
+ Enable timestamps as defined in RFC1323.
+
+tcp_sack - BOOLEAN
+ Enable select acknowledgements.
+
+tcp_retrans_collapse - BOOLEAN
+ Bug-to-bug compatibility with some broken printers.
+ On retransmit try to send bigger packets to work around bugs in
+ certain TCP stacks.
+
ip_local_port_range - 2 INTEGERS
Defines the local port range that is used by TCP and UDP to
choose the local port. The first number is the first, the
@@ -155,10 +115,94 @@
ICMP ECHO requests sent to it or just those to broadcast/multicast
addresses, respectively.
+icmp_destunreach_rate - INTEGER
+icmp_paramprob_rate - INTEGER
+icmp_timeexceed_rate - INTEGER
+icmp_echoreply_rate - INTEGER (not enabled per default)
+ Limit the maximal rates for sending ICMP packets to specifc targets.
+ 0 to disable any limiting, otherwise the maximal rate in jiffies(1)
+ See the source for more information.
+
+
+(1) Jiffie: internal timeunit for the kernel. On the i386 1/100s, on the
+Alpha 1/1024s. See the HZ define in /usr/include/asm/param.h for the exact
+value on your system.
+
+conf/interface/*:
+conf/all/* is special and changes the settings for all interfaces.
+ Change special settings per interface.
+
+log_martians - BOOLEAN
+ Log packets with impossible addresses to kernel log.
+
+accept_redirects - BOOLEAN
+ Accept ICMP redirect messages.
+ default TRUE (host)
+ FALSE (router)
+
+forwarding - BOOLEAN
+ Enable IP forwarding on this interface.
+
+mc_forwarding - BOOLEAN
+ Do multicast routing. The kernel needs to be compiled with CONFIG_MROUTE
+ and a multicast routing daemon is required.
+
+proxy_arp - BOOLEAN
+ Do proxy arp.
+
+shared_media - BOOLEAN
+ undocumented.
+
+secure_redirects - BOOLEAN
+ Accept ICMP redirect messages only for gateways,
+ listed in default gateway list.
+ default TRUE
+
+redirects - BOOLEAN
+ Send(router) or accept(host) RFC1620 shared media redirects.
+ Overrides ip_secure_redirects.
+ default TRUE (should be FALSE for distributed version,
+ but I use it...)
+
+bootp_relay - BOOLEAN
+ Accept packets with source address 0.b.c.d destined
+ not to this host as local ones. It is supposed, that
+ BOOTP relay deamon will catch and forward such packets.
+
+ default FALSE
+ Not Implemented Yet.
+
+accept_source_route - BOOLEAN
+ Accept packets with SRR option.
+ default TRUE (router)
+ FALSE (host)
+
+rp_filter - INTEGER
+ 2 - do source validation by reversed path, as specified in RFC1812
+ Recommended option for single homed hosts and stub network
+ routers. Could cause troubles for complicated (not loop free)
+ networks running a slow unreliable protocol (sort of RIP),
+ or using static routes.
+
+ 1 - (DEFAULT) Weaker form of RP filtering: drop all the packets
+ that look as sourced at a directly connected interface, but
+ were input from another interface.
+
+ 0 - No source validation.
+
+ NOTE: do not disable this option! All BSD derived routing software
+ (sort of gated, routed etc. etc.) is confused by such packets,
+ even if they are valid. When enabled it also prevents ip spoofing
+ in some limited fashion.
+
+ NOTE: this option is turned on per default only when ip_forwarding
+ is on. For non-forwarding hosts it doesn't make much sense and
+ makes some legal multihoming configurations impossible.
+
Alexey Kuznetsov.
kuznet@ms2.inr.ac.ru
Updated by:
Andi Kleen
ak@muc.de
-$Id: ip-sysctl.txt,v 1.5 1997/10/17 03:58:23 tdyas Exp $
+$Id: ip-sysctl.txt,v 1.7 1998/05/02 12:05:00 davem Exp $
FUNET's LINUX-ADM group, linux-adm@nic.funet.fi
TCL-scripts by Sam Shen, slshen@lbl.gov