From owner-freebsd-questions Wed May 9 5:37:13 2001 Delivered-To: freebsd-questions@freebsd.org Received: from hotmail.com (f221.law11.hotmail.com [64.4.17.221]) by hub.freebsd.org (Postfix) with ESMTP id 981EB37B423 for ; Wed, 9 May 2001 05:37:11 -0700 (PDT) (envelope-from t403403@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 9 May 2001 05:37:11 -0700 Received: from 12.77.221.66 by lw11fd.law11.hotmail.msn.com with HTTP; Wed, 09 May 2001 12:37:11 GMT X-Originating-IP: [12.77.221.66] From: "Terry Witherspoon" To: freebsd-questions@freebsd.org Subject: ICMP redirects. Date: Wed, 09 May 2001 07:37:11 -0500 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 09 May 2001 12:37:11.0510 (UTC) FILETIME=[C4C80760:01C0D884] Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, I've a BIND name server that every day has a icmp redirect in it's logs. I get one entry from the same place every day. Could this be a hack attempt. It's always directed at my secondary. icmp redirect from 1.2.3.10: 1.2.3.22 => 1.2.3.22 Does this not indicate someone is trying to tell the name server to use a special route to 1.2.3.22? Can this be innocuous or is this definitely hostile behaviour? Should I contact the remote ISP? TIA, TW _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message