From nobody Thu Jun 13 18:01:22 2024
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4W0VbL74lBz5P4lK
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Thu, 13 Jun 2024 18:01:34 +0000 (UTC)
	(envelope-from freebsd-rwg@gndrsh.dnsmgr.net)
Received: from gndrsh.dnsmgr.net (pdx.rh.CN85.dnsmgr.net [65.75.216.6])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4W0VbL39BNz4fg0;
	Thu, 13 Jun 2024 18:01:34 +0000 (UTC)
	(envelope-from freebsd-rwg@gndrsh.dnsmgr.net)
Authentication-Results: mx1.freebsd.org;
	none
Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1])
	by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id 45DI1MbI045632;
	Thu, 13 Jun 2024 11:01:22 -0700 (PDT)
	(envelope-from freebsd-rwg@gndrsh.dnsmgr.net)
Received: (from freebsd-rwg@localhost)
	by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id 45DI1MZu045631;
	Thu, 13 Jun 2024 11:01:22 -0700 (PDT)
	(envelope-from freebsd-rwg)
From: "Rodney W. Grimes" <freebsd-rwg@gndrsh.dnsmgr.net>
Message-Id: <202406131801.45DI1MZu045631@gndrsh.dnsmgr.net>
Subject: Re: Discarding inbound ICMP REDIRECT by default
In-Reply-To: <CAPyFy2AqSzrwz3rHg68Soztkr2yGgVUJL4AEdP9HcBLfbMyZrA@mail.gmail.com>
To: Ed Maste <emaste@FreeBSD.org>
Date: Thu, 13 Jun 2024 11:01:22 -0700 (PDT)
CC: "Rodney W. Grimes" <freebsd-rwg@gndrsh.dnsmgr.net>,
        freebsd-net@FreeBSD.org
X-Mailer: ELM [version 2.4ME+ PL121h (25)]
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@FreeBSD.org
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:10494, ipnet:65.75.216.0/23, country:US]
X-Rspamd-Queue-Id: 4W0VbL39BNz4fg0

[ Charset UTF-8 unsupported, converting... ]
> On Thu, 13 Jun 2024 at 09:39, Rodney W. Grimes
> <freebsd-rwg@gndrsh.dnsmgr.net> wrote:
> >
> > Discarding ICMP redirects on a internet host is non-conformant with
> > STD-3 via rfc-1122.  Processing of ICMP rediects is a MUST for hosts.
> 
> In that case our default of "auto" is non-conformant if you have a
> routing daemon.

NO, because then your not subject to rfc-1122 as your now a router,
not a host.

-- 
Rod Grimes                                                 rgrimes@freebsd.org