From owner-freebsd-questions  Thu Jun 25 14:42:52 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id OAA02276
          for freebsd-questions-outgoing; Thu, 25 Jun 1998 14:42:52 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from server.amis.net (server.amis.net [195.10.52.10])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA02067
          for <freebsd-questions@FreeBSD.ORG>; Thu, 25 Jun 1998 14:41:20 -0700 (PDT)
          (envelope-from blaz@gold.amis.net)
Received: (from uucp@localhost)
	by server.amis.net (8.8.8/8.8.8) with UUCP id XAA15193;
	Thu, 25 Jun 1998 23:40:57 +0200 (CEST)
Received: from localhost (blaz@localhost)
	by gold.amis.net (8.8.8/8.8.8) with SMTP id XAA00370;
	Thu, 25 Jun 1998 23:37:01 +0200 (CEST)
Date: Thu, 25 Jun 1998 23:37:01 +0200 (CEST)
From: Blaz Zupan <blaz@gold.amis.net>
To: Doug White <dwhite@resnet.uoregon.edu>
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: IP redirects
In-Reply-To: <Pine.BSF.3.96.980625120603.1471s-100000@resnet.uoregon.edu>
Message-ID: <Pine.BSF.3.96.980625233307.317A-100000@gold.amis.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> > I know about the sysctl variable "net.inet.ip.redirect", which one can use
> > to inhibit FreeBSD _sending_ IP redirects. But is there a variable to
> 
> Why?  Do you have a misbeahving NT box?

I have a machine connected to a subnet where I have two routers - one is a
Cisco connected to our main satellite link, the other is a Livingston
OR-ST which is the ISDN backup link. When we switch over to the backup
link, the redirections start piling up on the FreeBSD box, because the
default route points at the Cisco. When the Cisco comes back up, all those
redirections cause havoc - the OR-HS's default route points to the (now
down) ISDN link, which means most of the traffic from the BSD box goes to
a nonworking link. There are (AFAIK) three solutions:

1. Run gated on the FreeBSD box (which I would rather not do)
2. Put the Cisco and the OR-HS into another subnet (which I don't like)
3. Inhibit IP redirects (which somebody suggested could be done with ipfw)

I think I'll pick number 3).

Best regards,

Blaz Zupan, blaz@medinet.si, http://home.amis.net/blaz
Medinet d.o.o., Linhartova 21, 2000 Maribor, Slovenia


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message