Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 May 2001 11:58:23 +0300
From:      Giorgos Keramidas <keramidi@otenet.gr>
To:        John Gray <jgray@airtel-atn.com>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: Static routing only - no ICMP redirects
Message-ID:  <20010521115823.A19368@hades.hell.gr>
In-Reply-To: <3B08D541.F541EFF4@airtel-atn.com>; from jgray@airtel-atn.com on Mon, May 21, 2001 at 09:43:45AM %2B0100
References:  <3B08D541.F541EFF4@airtel-atn.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, May 21, 2001 at 09:43:45AM +0100, John Gray wrote:
> Is there a way to prevent a machine generating icmp_redirects, actually
> stop it running icmp altogether.
> I have tried the ICMP_DROP_REDIRECT ="YES" in /etc/rc.conf. This I think
> 
> affects action on incoming redirects, but does not prevent generation of
> redirects .

One quick hack to make this behave exactly like you want it to behave would be
to firewall all icmp redirects.  I dont know of the One True Way to disable
ICMP redirects in FreeBSD, but it seems that this will work :-)

--giorgos


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010521115823.A19368>