Subject: RE: Ignoring ICMP redirects when net.inet.ip.forwarding = 1 ?
To: 'Jeff Rizzo' <riz@boogers.sf.ca.us>
From: Stephane St Hilaire <ssthilaire@hyperchip.com>
List: tech-net
Date: 11/15/2001 14:32:28
>> Browsing through the mailing list archives, there seemed to be some
>> discussion about a year and a half ago regarding the treatment of
>> ICMP redirects, and my reading of the thread led me to believe that
>> it had been decided that if a box is a router (ip forwarding is on),
>> then redirects should be ignored.  Is this the case?

Here is a section of RFC 1812 (requirements for IPV4 routers) on the
subject.


>> 4.3.3.2 Redirect

>>    The ICMP Redirect message is generated to inform a local host that it
>>   should use a different next hop router for certain traffic.

>>   Contrary to [INTRO:2], a router MAY ignore ICMP Redirects when
>>   choosing a path for a packet originated by the router if the router
>>   is running a routing protocol or if forwarding is enabled on the
>>   router and on the interface over which the packet is being sent.


Basically Routers do not have to do anything if they receive ICMP redirects.
The routing protocols are in charge of getting the routing information and
if they can't manage to do this well, ICMP is not the answer.


Steph