ipv4: add option to drop gratuitous ARP packets
In certain 802.11 wireless deployments, there will be ARP proxies that use knowledge of the network to correctly answer requests. To prevent gratuitous ARP frames on the shared medium from being a problem, on such deployments wireless needs to drop them. Enable this by providing an option called "drop_gratuitous_arp". Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:

committed by
David S. Miller

parent
12b74dfadb
commit
97daf33145
@@ -1223,6 +1223,12 @@ drop_unicast_in_l2_multicast - BOOLEAN
|
||||
1122, but is disabled by default for compatibility reasons.
|
||||
Default: off (0)
|
||||
|
||||
drop_gratuitous_arp - BOOLEAN
|
||||
Drop all gratuitous ARP frames, for example if there's a known
|
||||
good ARP proxy on the network and such frames need not be used
|
||||
(or in the case of 802.11, must not be used to prevent attacks.)
|
||||
Default: off (0)
|
||||
|
||||
|
||||
tag - INTEGER
|
||||
Allows you to write a number, which can be used as required.
|
||||
|
Reference in New Issue
Block a user