ipv6: Add icmp_echo_ignore_all support for ICMPv6

Preventing the kernel from responding to ICMP Echo Requests messages can be useful in several ways. The sysctl parameter 'icmp_echo_ignore_all' can be used to prevent the kernel from responding to IPv4 ICMP echo requests. For IPv6 pings, such a sysctl kernel parameter did not exist. Add the ability to prevent the kernel from responding to IPv6 ICMP echo requests through the use of the following sysctl parameter : /proc/sys/net/ipv6/icmp/echo_ignore_all. Update the documentation to reflect this change.

Virgile Jarry committed 8 years ago

Commit e6f86b01 parent 8f780045 files · +22 −4Browse files

Showing the changes to include/uapi/linux (1 of 5 files). Show all

Unified · Split

include/uapi/linux/sysctl.h+2−1

@@ -575,7 +575,8 @@ enum { · 574 unmodified lines
575	575
576	576	/* /proc/sys/net/ipv6/icmp */
577	577	enum {
578		− NET_IPV6_ICMP_RATELIMIT=1
	578	+ NET_IPV6_ICMP_RATELIMIT = 1,
	579	+ NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2
579	580	};
580	581
581	582	/* /proc/sys/net/<protocol>/neigh/<dev> */