# https://bugzilla.redhat.com/show_bug.cgi?id=1689346

kernel.kptr_restrict = 1

# Source route verification

net.ipv4.conf.default.rp_filter = 1

net.ipv4.conf.*.rp_filter = 1

-net.ipv4.conf.all.rp_filter