From nobody Thu Jun 13 15:02:50 2024
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4W0QdN1ZWMz5NpST
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Thu, 13 Jun 2024 15:03:04 +0000 (UTC)
	(envelope-from carpeddiem@gmail.com)
Received: from mail-il1-f182.google.com (mail-il1-f182.google.com [209.85.166.182])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "smtp.gmail.com", Issuer "WR4" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4W0QdM6cZXz4K2M
	for <freebsd-net@freebsd.org>; Thu, 13 Jun 2024 15:03:03 +0000 (UTC)
	(envelope-from carpeddiem@gmail.com)
Authentication-Results: mx1.freebsd.org;
	none
Received: by mail-il1-f182.google.com with SMTP id e9e14a558f8ab-375d39a0714so5740555ab.1
        for <freebsd-net@freebsd.org>; Thu, 13 Jun 2024 08:03:03 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1718290982; x=1718895782;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=COjtQYSOJxUwyHLEo2P9mRVe5L6C3CO3Zs/63eQ3jhY=;
        b=CSdqmgtZ9Qy6T/xOTHRmNhrRp+RLxlHye9DKOMqX2QAvVRLroSbPzsoO+NhjhCxEXG
         shEeor3rtjuZY7sPlbShc9FvSJZcYU69mrSxrUXCXUajgbS6WAjZFFX4Az5FZD0w1wyK
         XGDNutz8aeG9Z2IoEMu9J8W3Hc1rpl6J9DjPjuYmsTMVV/hyUNqWnMKBLdonbwMVTAiD
         PhlTZQd1dQet43eGt3i7TjzWD3XZAE77rYHk14tumAThJ/hL3W7PTf9FBIOgMBTc3agw
         I01rrotILTjvdlU+smEsI3dTC+1W5UHMJGBKSHW/mEWvVOzATcBvqNvTD1Av18Ha3tVH
         lQrg==
X-Gm-Message-State: AOJu0Yy4sOlLKdmbYgrK5ew4rigZteWczvU2ZjEOVZPMaq2k2au4EU3f
	AFVl18HvRqGobzxxl9JKJO0zTvDnGE10QkQLt9yYUSc/R/yThrSQcHk43VSltoD2F2Jx45whxKg
	EdurWwa3+/fpAhUNR64AghNiadhyvIw==
X-Google-Smtp-Source: AGHT+IEQ+D9lYrjkseDaqMGHddJCZXUyAbcAEJcUkA8g8IiCE2+wDm4EGu5c3qlpvWYdwxFLXGKNay4ZTG0pEW5/sIo=
X-Received: by 2002:a05:6e02:1a86:b0:375:c394:4344 with SMTP id
 e9e14a558f8ab-375cd1e44famr54109025ab.21.1718290982508; Thu, 13 Jun 2024
 08:03:02 -0700 (PDT)
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@FreeBSD.org
MIME-Version: 1.0
References: <CAPyFy2CKZFf6QF1j-kWPG+3yetjNSszdCnJF=T6-hPmozheYYw@mail.gmail.com>
 <202406131339.45DDdDma044779@gndrsh.dnsmgr.net>
In-Reply-To: <202406131339.45DDdDma044779@gndrsh.dnsmgr.net>
From: Ed Maste <emaste@freebsd.org>
Date: Thu, 13 Jun 2024 11:02:50 -0400
Message-ID: <CAPyFy2AqSzrwz3rHg68Soztkr2yGgVUJL4AEdP9HcBLfbMyZrA@mail.gmail.com>
Subject: Re: Discarding inbound ICMP REDIRECT by default
To: "Rodney W. Grimes" <freebsd-rwg@gndrsh.dnsmgr.net>
Cc: freebsd-net@freebsd.org
Content-Type: text/plain; charset="UTF-8"
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]
X-Rspamd-Queue-Id: 4W0QdM6cZXz4K2M

On Thu, 13 Jun 2024 at 09:39, Rodney W. Grimes
<freebsd-rwg@gndrsh.dnsmgr.net> wrote:
>
> Discarding ICMP redirects on a internet host is non-conformant with
> STD-3 via rfc-1122.  Processing of ICMP rediects is a MUST for hosts.

In that case our default of "auto" is non-conformant if you have a
routing daemon.