From owner-freebsd-net@FreeBSD.ORG Mon Mar 20 16:03:08 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A6B1416A400 for ; Mon, 20 Mar 2006 16:03:08 +0000 (UTC) (envelope-from lk@tempest.sk) Received: from proxy.dgrp.sk (proxy.dgrp.sk [195.28.127.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3E55443D6B for ; Mon, 20 Mar 2006 16:03:06 +0000 (GMT) (envelope-from lk@tempest.sk) Received: by proxy.dgrp.sk (Postfix, from userid 1003) id B458C800A; Mon, 20 Mar 2006 17:03:05 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on proxy.dgrp.sk X-Spam-Level: X-Spam-Status: No, score=0.2 required=4.0 tests=AWL autolearn=ham version=3.1.0 Received: from webmail.tempest.sk (domino1.tempest.sk [195.28.100.38]) by proxy.dgrp.sk (Postfix) with ESMTP id 367CB8004; Mon, 20 Mar 2006 17:03:02 +0100 (CET) Received: from lk107.tempest.sk ([195.28.109.37]) by webmail.tempest.sk (Lotus Domino Release 6.5.4) with ESMTP id 2006032017030085-2232 ; Mon, 20 Mar 2006 17:03:00 +0100 Received: from localhost (localhost [127.0.0.1]) by lk107.tempest.sk (8.13.4/8.13.4) with ESMTP id k2KG2ohV040658; Mon, 20 Mar 2006 17:02:53 +0100 (CET) (envelope-from lk@tempest.sk) Date: Mon, 20 Mar 2006 17:02:50 +0100 (CET) Message-Id: <20060320.170250.55514747.lk@tempest.sk> To: keramida@ceid.upatras.gr From: Ludovit Koren in-reply-to: <20060320121607.GA7924@flame.pc> (message from Giorgos Keramidas on Mon, 20 Mar 2006 04:16:07 -0800) References: <20060320.125130.92586288.lk@tempest.sk> <20060320121607.GA7924@flame.pc> X-Mailer: xcite1.57> Mew version 4.2 on Emacs 21.3 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 X-MIMETrack: Itemize by SMTP Server on Domino1/DGRP(Release 6.5.4|March 27, 2005) at 20.03.2006 17:03:00, Serialize by Router on Domino1/DGRP(Release 6.5.4|March 27, 2005) at 20.03.2006 17:03:02, Serialize complete at 20.03.2006 17:03:02 Content-Transfer-Encoding: 7bit Content-Type: Text/Plain; charset=us-ascii Cc: freebsd-net@freebsd.org Subject: Re: static routes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Mar 2006 16:03:08 -0000 >>>>> On Mon, 20 Mar 2006 04:16:07 -0800 >>>>> keramida@ceid.upatras.gr(Giorgos Keramidas) said: > > On 2006-03-20 12:51, Ludovit Koren wrote: > > > > Hi, > > > > I realized on several different versions of FreeBSD including > > 5.4-STABLE, when using static routes to specific subnets and the WAN > > link goes down for unpredictable reasons, the server gets ICMP > > redirect message and rearranges routes to use default router. Then all > > the traffic is routed to the default router even the WAN link is again > > up. Other unix like system (HP-UX, Linux) do not act the way, > > i.e. they do not change static routes. > > > > Should not be ignored the ICMP redirect messages concerning static > > routes? > > That depends on what you have configured the system to do. You can set > the net.inet.icmp.drop_redirect sysctl to 1 to drop them. > Maybe my question was misleading. The static route should be static, i.e. it should never change that's why the name is static, I feel. Generally, I think, the ICMP redirect should be enabled in the stack. I didn't read RFC about ICMP and about routing and I do not really know if the FreeBSD implementation is correct one. I think your proposal is a hack. Another question seems to be: Should be the default router configured so that it knows about all static routes and routers in the subnet and therefore it can send ICMP redirects to 'static route' routers as well? Regards, lk