# Turn on Source Address Verification in all interfaces to # prevent some spoofing attacks. net.ipv4.conf.default.rp_filter=2 net.ipv4.conf.all.rp_filter=2