diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2016-02-04 15:31:20 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-02-11 12:27:36 +0300 |
| commit | 7a02bf892d8f1e5298af1676f001bee410509d80 (patch) | |
| tree | dcdd03f7fdedaf5c1ff5363415b68afe6ac57374 /Documentation/networking | |
| parent | abbc30436d39dfed8ebfca338d253f211ac7b094 (diff) | |
| download | linux-7a02bf892d8f1e5298af1676f001bee410509d80.tar.xz | |
ipv6: add option to drop unsolicited neighbor advertisements
In certain 802.11 wireless deployments, there will be NA proxies
that use knowledge of the network to correctly answer requests.
To prevent unsolicitd advertisements on the shared medium from
being a problem, on such deployments wireless needs to drop them.
Enable this by providing an option called "drop_unsolicited_na".
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation/networking')
| -rw-r--r-- | Documentation/networking/ip-sysctl.txt | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt index e0e7350a4e6a..24ce97f42d35 100644 --- a/Documentation/networking/ip-sysctl.txt +++ b/Documentation/networking/ip-sysctl.txt @@ -1680,6 +1680,13 @@ drop_unicast_in_l2_multicast - BOOLEAN By default this is turned off. +drop_unsolicited_na - BOOLEAN + Drop all unsolicited neighbor advertisements, for example if there's + a known good NA proxy on the network and such frames need not be used + (or in the case of 802.11, must not be used to prevent attacks.) + + By default this is turned off. + icmp/*: ratelimit - INTEGER Limit the maximal rates for sending ICMPv6 packets. |