systemd single handedly disabled rp_filter on all interfaces about systemd

[YHNdnzj]

Hmm, that's why drop-ins support ordering? When you add new sysctl.d config, just order it after vendor-supplied ones?

[Gunni]

Yes but if I add

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter =  1

To 01-custom.conf to sysctl.d it is ignored because this patch is setting

net.ipv4.conf.*.rp_filter = 2

So it gets applied to all interfaces too, then i would need to do that too but:

The max value from conf/{all,interface}/rp_filter is used when doing source validation on the {interface}.

[yuwata]

Please try to rename the file to e.g. 60-custom.conf.

[Gunni]

The problem is not what to name the file, it is the fact that because you define a value for ALL INTERFACES separately without just using the .all. as intended you require me to do the same.

It is not enough for me to make a 60-custom.conf with

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter =  1

I would have to make it with the same as you

net.ipv4.conf.*.rp_filter =  1

Which is ridiculous, why can't you either not set these kinds of policies, or set the all key as it is designed to be used.