[Cialug] Ip forward question

[Dave Weis]

Files in /proc aren't real on-disk files, it's a way to pass commands to 
the kernel and read the state of things from the kernel. That's why they 
go back to the default after a reboot. The sysctl route works because a 
program reads that file on boot and makes the same changes as echo 1 does.

albus wrote:
> That at least leaves it turned on when I restart the network.
> 
> 
> ----- Original Message ----- 
> From: "Tom Pohl" <tom at tcpconsulting.com>
> To: "Central Iowa Linux Users Group" <cialug at cialug.org>
> Sent: Monday, December 14, 2009 3:39 PM
> Subject: Re: [Cialug] Ip forward question
> 
> 
>> You can always change the default in sysctl.conf
>> net.ipv4.conf.default.proxy_arp = 1
>>
>> BUT that may have unintended consequences depending on if you want to do proxy_arp on all interfaces or just your select 2!
>>
>> -Tom
>>
>>
>> On Dec 14, 2009, at 3:34 PM, albus wrote:
>>
>>> I've got a new proxy arp firewall setup with CentOS 5.4
>>>
>>> It has only 2 nics.
>>>
>>> I've run 
>>> echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
>>> echo 1 > /proc/sys/net/ipv4/conf/eth1/proxy_arp
>>>
>>> And it all works. However every time I service network restart or reboot it drops forwarding
>>> until I re-issue the 2 echo lines.
>>>
>>> Something is over writing it. From what I've Googled it's a problem others have had as well. But
>>> I haven't run in to how to make it permanant.
>>>
>>> I'm about to just include the 2 echo lines in /etc/rc.local 
>>> But I'd rather know where to make it stick instead.
>>>
>>> Any ideas?
>>>
>>> _______________________________________________
>>> Cialug mailing list
>>> Cialug at cialug.org
>>> http://cialug.org/mailman/listinfo/cialug
>> _______________________________________________
>> Cialug mailing list
>> Cialug at cialug.org
>> http://cialug.org/mailman/listinfo/cialug
>>
>>
> 
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug




-- 
Dave Weis
515-224-9229
djweis at internetsolver.com
http://www.internetsolver.com/
Please check out our Complete Support Service
http://www.internetsolver.com/completesupport/