howto/networksettings.md
... ...
@@ -22,6 +22,8 @@ Check that its really disabled:
22 22
sysctl -a | grep rp_filter
23 23
```
24 24
25
+**Note** The max value from `conf/{all,interface}/rp_filter` is used when doing source validation on the `{interface}`. In case you don't want to disable `rp_filter` for the entire system, the correct setup is to set both `net.ipv4.conf.all.rp_filter=0` and `net.ipv4.conf.{interface}.rp_filter=0`, where `{interface}` is your vpn interface.
26
+
25 27
Also the following options must be set.
26 28
```sh
27 29
$ sysctl -w net.ipv4.conf.all.forwarding=1 net.ipv6.conf.all.forwarding=1