From owner-freebsd-questions Fri Jun 26 10:47:04 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA22125 for freebsd-questions-outgoing; Fri, 26 Jun 1998 10:47:04 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from resnet.uoregon.edu (resnet.uoregon.edu [128.223.144.32]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA22013 for ; Fri, 26 Jun 1998 10:46:32 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Received: from localhost (dwhite@localhost) by resnet.uoregon.edu (8.8.5/8.8.8) with SMTP id KAA09604; Fri, 26 Jun 1998 10:46:19 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Date: Fri, 26 Jun 1998 10:46:19 -0700 (PDT) From: Doug White To: Blaz Zupan cc: freebsd-questions@FreeBSD.ORG Subject: Re: IP redirects In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 25 Jun 1998, Blaz Zupan wrote: > When we switch over to the backup link, the redirections start piling up > on the FreeBSD box, because the default route points at the Cisco. Ah, ok, I see. > 1. Run gated on the FreeBSD box (which I would rather not do) > 2. Put the Cisco and the OR-HS into another subnet (which I don't like) > 3. Inhibit IP redirects (which somebody suggested could be done with ipfw) > > I think I'll pick number 3). Okay, in that case you need to find what message type redirects are, then block them from ipfw, specifying the ICMP message type to block. This should be on the ipfw man page. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message