LINUX: Command To Check Reverse Path Settings (rp_filter) For Network bonds/interfaces on Linux (How To Doc) (sysctl command)

Below command can be used to check reverse path settings (rp_filter) for network bonds/interfaces on Linux hosts.

sysctl -a | grep ipv4 | grep rp_filter | grep -v arp

Below is example snippet of above command.

# sysctl -a | grep ipv4 | grep rp_filter | grep -v arp
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.bond0.rp_filter = 1
net.ipv4.conf.bond1.rp_filter = 1
net.ipv4.conf.bond2.rp_filter = 1
net.ipv4.conf.bond3.rp_filter = 1
net.ipv4.conf.bond4.rp_filter = 1
net.ipv4.conf.bond5.rp_filter = 1
net.ipv4.conf.bond6.rp_filter = 1
net.ipv4.conf.default.rp_filter = 2
net.ipv4.conf.eth0.rp_filter = 2
net.ipv4.conf.eth1.rp_filter = 2
net.ipv4.conf.eth2.rp_filter = 2
net.ipv4.conf.eth3.rp_filter = 2
net.ipv4.conf.ib0.rp_filter = 2
net.ipv4.conf.ib0/8002.rp_filter = 1
net.ipv4.conf.ib0/8003.rp_filter = 1
net.ipv4.conf.ib0/8004.rp_filter = 1
net.ipv4.conf.ib0/8005.rp_filter = 1
net.ipv4.conf.ib0/8006.rp_filter = 1
net.ipv4.conf.ib1.rp_filter = 2

For more information on rp_filter values and what they mean refer to https://www.theurbanpenguin.com/rp_filter-and-lpic-3-linux-security/

Products to which Article Applies

All Linux Operating Systems

Additional Reference

https://www.theurbanpenguin.com/rp_filter-and-lpic-3-linux-security/
 

tarun boyella