Subject: Re: Ignore incoming ICMP redirect packets
To: Bill Sommerfeld <>
From: Manuel Bouyer <>
List: tech-net
Date: 02/18/2000 22:26:34
On Fri, Feb 18, 2000 at 02:44:49PM -0500, Bill Sommerfeld wrote:
> > how can I can configure a NetBSD 1.4 system to ignore *incoming*
> > ICMP redirect packets? The kernel variable "net.inet.ip.redirect"
> > seems only to prevent outgoing ICMP packets.
> For what it's worth, i believe router requirements requires routers to
> ignore redirects by default; when we're running with ipforwarding
> turned on, we should ignore them...

A sysctl net.inet.ip.acceptredirects would be nice.

Manuel Bouyer, LIP6, Universite Paris VI.