documentation_complete: true

title: net.ipv4.conf.all.rp_filter

description: |-
    Enable to enforce sanity checking, also called ingress
    filtering or egress filtering. The point is to drop a packet if the
    source and destination IP addresses in the IP header do not make
    sense when considered in light of the physical interface on which
    it arrived.

type: number

operator: equals

interactive: false

options:
    default: 1
    enabled: 1
    loose: 2
