Re: [PATCH] net: implement emergency route cache rebulds when gc_elasticity is exceeded
From: David Miller <davem@davemloft.net>
Date: 2008-09-30 14:09:00
From: Eric Dumazet <redacted> Date: Mon, 29 Sep 2008 22:22:03 +0200
This sounds not good at all to me. 1) Dont set ip_rt_secret_interval to zero, this is plain silly, since you give attackers infinite time to break your machine.
It makes a ton of sense, even by default, if we set things up so that we turn it back on when necessary. And that's the final intended idea, to do exactly that.