David Jones <dej@eecg.toronto.edu>  wrote:
 > > can it be done? if so, how would i go about it?
 > 
 > Simply remove options IPFORWARDING and options GATEWAY from the config file.

That doesn't disable source routes.

You want to patch /sys/netinet/ip_input.c:

*** ip_input.c  Fri Mar  3 07:37:24 1995
--- ip_input.c.dist     Mon Feb 27 02:16:17 1995
***************
*** 686,700 ****
                 */
                case IPOPT_LSRR:
                case IPOPT_SSRR:
- /*
-  * Source routing is not our friend.
-  */
- printf("SRC_RT\n");
-                       type=ICMP_UNREACH;
-                       code = ICMP_UNREACH_SRCFAIL;
-                       goto bad;
- /*
-  */
                        if ((off = cp[IPOPT_OFFSET]) < IPOPT_MINOFF) {
                                code = &cp[IPOPT_OFFSET] - (u_char *)ip;
                                goto bad;
--- 686,691 ----

One of these days I'm going to do the above properly and either make it
a sysctl or an option or something but.......