Re: Direct/Tunneling lvs and spoofing protection

[Emmanuel Paré <emman@xxxxxxxxxx>]

Just to mention that all work great with kernel 2.2.14pre14
and ipvs 0.9.8  but dont forget to put this in your rc.local (redhat)

echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/ip_always_defrag
echo 1 > /proc/sys/net/ipv4/conf/all/hidden
echo 1 > /proc/sys/net/ipv4/conf/eth1/hidden
/sbin/ipchains -A forward -j MASQ -s 10.1.1.0/24 -d 0.0.0.0/0

the "hidden" is for hidding arp reply (no longer need to apply a patch is
part of the kernel)