Subject: Re: Ignore incoming ICMP redirect packets
To: Bill Sommerfeld <email@example.com>
From: Manuel Bouyer <firstname.lastname@example.org>
Date: 02/18/2000 22:26:34
On Fri, Feb 18, 2000 at 02:44:49PM -0500, Bill Sommerfeld wrote:
> > how can I can configure a NetBSD 1.4 system to ignore *incoming*
> > ICMP redirect packets? The kernel variable "net.inet.ip.redirect"
> > seems only to prevent outgoing ICMP packets.
> For what it's worth, i believe router requirements requires routers to
> ignore redirects by default; when we're running with ipforwarding
> turned on, we should ignore them...
A sysctl net.inet.ip.acceptredirects would be nice.
Manuel Bouyer, LIP6, Universite Paris VI. Manuel.Bouyer@lip6.fr