OpenVZ Forum: Support » sysctl.conf ip_forward = 1 changes after reboot

Home » General » Support » sysctl.conf ip_forward = 1 changes after reboot

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

sysctl.conf ip_forward = 1 changes after reboot [message #15924]

Thu, 16 August 2007 03:06

penguin
Messages: 2
Registered: August 2007

Junior Member

I have set net.ipv4.ip_forward = 1 in my sysctl.conf file. After a reboot it changes back to 0.

I then need to run; echo 1 > /proc/sys/net/ipv4/ip_forward, to set it back to 1.

Any ideas what can be done to make the change permanent? I'm running CentOS 5 with APF firewall front for iptables.

Report message to a moderator

Re: sysctl.conf ip_forward = 1 changes after reboot [message #15927 is a reply to message #15924]

Thu, 16 August 2007 07:07

khorenko
Messages: 535
Registered: January 2006
Location: Belgrade, Serbia

Senior Member

1) the straightforward and dull way is to put a command "echo 1 > /proc/sys/net/ipv4/ip_forward" into rc.local.

2) of course way 1 is bad. Let's try to understand what drops ip_forward to 0 in your system?
Could you please post the complete /etc/sysctl.conf and /etc/sysconfig/network ?
Could you grep /etc directory for "ip_forward"? Which scripts change this parameter and under what conditions?

If your problem is solved - please, report it!
It's even more important than reporting the problem itself...

Report message to a moderator

Re: sysctl.conf ip_forward = 1 changes after reboot [message #15935 is a reply to message #15927]

Thu, 16 August 2007 09:14

khorenko
Messages: 535
Registered: January 2006
Location: Belgrade, Serbia

Senior Member

In particular we suspect APF because its scripts do change ip_forward under some conditions.

If your problem is solved - please, report it!
It's even more important than reporting the problem itself...

Report message to a moderator

Re: sysctl.conf ip_forward = 1 changes after reboot [message #15938 is a reply to message #15924]

Thu, 16 August 2007 10:49

kir
Messages: 1645
Registered: August 2005
Location: Moscow, Russia

Senior Member

penguin wrote on Thu, 16 August 2007 07:06

Any ideas what can be done to make the change permanent? I'm running CentOS 5 with APF firewall front for iptables.

It looks like your APF firewall is changing that. There is something in sysctl.rules that sets that to either 1 or 0 -- please check that file or APF docs about how to fix that for you.

Kir Kolyshkin