Alin Nastac d8748e537f netfilter: add iptables-mod-rpfilter package ... Unlike /proc/sys/net/ipv4/conf/INTF/rp_filter flag, rule iptables -t raw -I PREROUTING -m rpfilter --invert -j DROP prevents conntrack table to become full when a packet flood with randomly selected source IP addresses is received from the lan side. Signed-off-by: Alin Nastac <alin.nastac@gmail.com>		2017-07-11 22:09:57 +02:00
..
modules	netfilter: add iptables-mod-rpfilter package	2017-07-11 22:09:57 +02:00
Makefile	build: use mkhash to replace various quirky md5sum/openssl calls	2017-01-05 11:09:12 +01:00