Re: secure installation

On 8/16/07, Ondrej Zajicek <santiago@crfreenet.org> wrote:
> And if there is no firewall (or other
> hand-crafted protective measures), then there is no need for
> rp_filter. So on common workstation there is no need for
> rp_filter too.

I also don't see why you need rp_filter on a workstation. A workstation generally has a single default gateway that routes incoming and outgoing traffic. Since the netmask is 0.0.0.0, absolutely any packet is allowed to come from there, so enabling rp_filter would do absolutely nothing.

-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org