1 files changed, 2 insertions(+), 0 deletions(-)

M roles/firewalld/files/firewalld.conf

@@ 23,6 23,8 @@ Lockdown=no
 # packet would be sent via the same interface that the packet arrived on, the 
 # packet will match and be accepted, otherwise dropped.
 # The rp_filter for IPv4 is controlled using sysctl.
+# Note: This feature has a performance impact. See man page FIREWALLD.CONF(5)
+# for details.
 # Default: yes
 IPv6_rpfilter=yes