How to load iptables rpfilter module ?

[Denna]

How do you load the iptables rpfilter module in a script ?

 

[Denna]

Is this not supported in Asuswrt-Merlin ?

 

[john9527]

Not available.....kernel is too old

"A new iptables/ip6tables match (rpfilter) was added in kernel 3.4.4"

 

[Denna]

Are the "/proc/sys/net/ipv4/conf/*/rp_filter" settings used by the firmware ?

​

What is the difference between setting the values in "/proc/sys/net/ipv4/conf/*/rp_filter" and using the netfilter module ?

​

 

[Denna]

Are the "/proc/sys/net/ipv4/conf/*/rp_filter" settings used in the Asuswrt-Merlin firmware ?

 

[Denna]

What are the "/proc/sys/net/ipv4/conf/*/rp_filter" settings used for in Asuswrt-Merlin ?

 

[Martineau]

What are the "/proc/sys/net/ipv4/conf/*/rp_filter" settings used for in Asuswrt-Merlin ?

e.g. see /usr/sbin/vpnrouting.sh

# Unsure if necessary, but most policy-based routing scripts disable reverse path filtering
 for i in /proc/sys/net/ipv4/conf/*/rp_filter ; do
  echo 0 > $i
 done

 

[Denna]

@Martineau,

Is that code from @RMerlin or Asus ?​

Policy based routing is used to direct traffic for specific IP/MAC addresses to a particular VPN client on the router, correct ?

When configuring routing in this manner in the Asuswrt-Merlin WebGUI, that automatically changes all the "1" values to "0", correct ?​

 

[Martineau]

@Martineau,

Is that code from @RMerlin or Asus ?​

@RMerlin

@Martineau

Policy based routing is used to direct traffic for specific IP/MAC addresses to a particular VPN client on the router, correct ?

When configuring routing in this manner in the Asuswrt-Merlin WebGUI, that automatically changes all the "1" values to "0", correct ?​

Yes

Yes probably...the previous value may not necessarily be '1'

 

[Denna]

@Martineau,

Thanks for the help.​