From owner-freebsd-stable  Mon May 21  6:57:17 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from prism.flugsvamp.com (cb58709-a.mdsn1.wi.home.com [24.17.241.9])
	by hub.freebsd.org (Postfix) with ESMTP id 4A85337B424
	for <stable@freebsd.org>; Mon, 21 May 2001 06:57:15 -0700 (PDT)
	(envelope-from jlemon@flugsvamp.com)
Received: (from jlemon@localhost)
	by prism.flugsvamp.com (8.11.0/8.11.0) id f4LDukw52515;
	Mon, 21 May 2001 08:56:46 -0500 (CDT)
	(envelope-from jlemon)
Date: Mon, 21 May 2001 08:56:46 -0500 (CDT)
From: Jonathan Lemon <jlemon@flugsvamp.com>
Message-Id: <200105211356.f4LDukw52515@prism.flugsvamp.com>
To: jgray@airtel-atn.com, stable@freebsd.org
Subject: Re: Static routing only - no ICMP redirects
X-Newsgroups: local.mail.freebsd-stable
In-Reply-To: <local.mail.freebsd-stable/3B08D541.F541EFF4@airtel-atn.com>
Organization: 
Cc: 
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

In article <local.mail.freebsd-stable/3B08D541.F541EFF4@airtel-atn.com> you write:
>Is there a way to prevent a machine generating icmp_redirects, actually
>stop it running icmp altogether.
>I have tried the ICMP_DROP_REDIRECT ="YES" in /etc/rc.conf. This I think
>
>affects action on incoming redirects, but does not prevent generation of
>
>redirects .

	sysctl -w net.inet.ip.redirect=0

-- 
Jonathan

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message