Browse Source

Netfilter: No uRPF on interface with a default gateway

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 1 year ago
parent
commit
58bd7a6443
1 changed files with 4 additions and 0 deletions
  1. 4 0
      _modules/ffho_netfilter.py

+ 4 - 0
_modules/ffho_netfilter.py

@@ -153,6 +153,10 @@ def _active_urpf (iface, iface_config):
 	if iface_config.get ('vrf') in ['vrf_external']:
 		return False
 
+	# Default gateway pointing towards this interface?
+	if iface_config.get ('gateway'):
+		return False
+
 	# Ignore interfaces by VLAN
 	match = vlan_re.search (iface)
 	if match: