Date: Fri, 25 Oct 2019 14:31:39 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: k simon <moremore2@outlook.com>, "freebsd-net@freebsd.org" <freebsd-net@freebsd.org> Subject: Re: How to disable tryforward ? Message-ID: <aa7a2050-1635-d68e-fb6f-62663156be84@yandex.ru> In-Reply-To: <HK0PR03MB32026778B9D469798DBF9326EE680@HK0PR03MB3202.apcprd03.prod.outlook.com> References: <HK0PR03MB32026778B9D469798DBF9326EE680@HK0PR03MB3202.apcprd03.prod.outlook.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Jkuf2p5i6192U2WOr21CjF9MSES6WceaB Content-Type: multipart/mixed; boundary="1sKhJEDE6GAcA53exQSC8KN4iis6CzSU2"; protected-headers="v1" From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: k simon <moremore2@outlook.com>, "freebsd-net@freebsd.org" <freebsd-net@freebsd.org> Message-ID: <aa7a2050-1635-d68e-fb6f-62663156be84@yandex.ru> Subject: Re: How to disable tryforward ? References: <HK0PR03MB32026778B9D469798DBF9326EE680@HK0PR03MB3202.apcprd03.prod.outlook.com> In-Reply-To: <HK0PR03MB32026778B9D469798DBF9326EE680@HK0PR03MB3202.apcprd03.prod.outlook.com> --1sKhJEDE6GAcA53exQSC8KN4iis6CzSU2 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 22.10.2019 08:38, k simon wrote: > Hi, > Tryforwad have merged 3 yeas ago, and it haven=E2=80=99t a sysctl to d= isable it , so ECMP was broken past 3 years. Olivier has fired a bug : ht= tps://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D225792 , it seems that = a few of people cares it. > Andrey said maybe some ipsec policy can disable tryforward.( https://li= sts.freebsd.org/pipermail/freebsd-net/2017-February/047203.html. ) I have= tried a lot configurations, but failed. Can someone point it out ? > Thanks! AFAIR, tryforward was disabled by default later. You need to disable icmpredirects to enable tryforward. So, if you don't need tryforward, just enable ICMP redirects. --=20 WBR, Andrey V. Elsukov --1sKhJEDE6GAcA53exQSC8KN4iis6CzSU2-- --Jkuf2p5i6192U2WOr21CjF9MSES6WceaB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAl2y3RsACgkQAcXqBBDI oXpYrQgAlI3lVX9DZ/RXFAlX77UoUNPElphirTVN98bfZpmY+hev8NCW5vdE/6xi J/bGa8e5gOJuLHNF/Iua1Eui6DUlmg5Lk/qyDcO0P0ZQijJNY/BTRXYSgjfnSpN7 vphwKu1Y8wDvSxtEXkbvGP22VLQs2AZ/Jgmbphw+b10l40J71dPcdf8ZMQGLwg9J PYwyXl33gmi4/+DvOBe1X+uZfi9n+sSzorgsBnQLVS5hXY71AZPDjZgHnGj0jiWy s97BMzGDeKEJtVgRCW5AG/RniFMhLUTYP3B801pczfARKw2YIiFkUQBZhxmjyCRu ZbcN8dqgbAREnsqgGrHgjmtWvngvzQ== =dn2H -----END PGP SIGNATURE----- --Jkuf2p5i6192U2WOr21CjF9MSES6WceaB--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aa7a2050-1635-d68e-fb6f-62663156be84>