ba5a7cd3fc
Router gains Rc<Cell<bool>> ip_forward flag (default: true). When false, forward_packets() returns immediately — no packets forwarded between interfaces. Security best practice for non-router hosts. netcfg scheme gains sysctl subtree: /scheme/netcfg/sysctl/net/ipv4/ip_forward (rw: 0 or 1) Read: echo /scheme/netcfg/sysctl/net/ipv4/ip_forward → 1 Write: echo 0 > /scheme/netcfg/sysctl/net/ipv4/ip_forward (disable) Restore: echo 1 > /scheme/netcfg/sysctl/net/ipv4/ip_forward Mirrors Linux /proc/sys/net/ipv4/ip_forward. Shared via Rc<Cell<bool>> between Router and NetCfgScheme.