Makes the kernel drop packets whose source address does not route back through the interface they arrived on, blocking IP spoofing. The value 1 is strict filtering, while 2 is loose. Apply to all and default interfaces for full coverage.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.