Subject: Re: Ignore incoming ICMP redirect packets
To: Matthias Scheler <tron@zhadum.de>
From: Bill Sommerfeld <sommerfeld@orchard.arlington.ma.us>
List: tech-net
Date: 02/18/2000 14:44:49
> how can I can configure a NetBSD 1.4 system to ignore *incoming*
> ICMP redirect packets? The kernel variable "net.inet.ip.redirect"
> seems only to prevent outgoing ICMP packets.
For what it's worth, i believe router requirements requires routers to
ignore redirects by default; when we're running with ipforwarding
turned on, we should ignore them...
- Bill