Re: Discarding inbound ICMP REDIRECT by default

In reply to: Rodney W. Grimes: "Re: Discarding inbound ICMP REDIRECT by default"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Ed Maste <emaste_at_freebsd.org>
Date: Fri, 14 Jun 2024 15:53:22 UTC

On Fri, 14 Jun 2024 at 11:13, Rodney W. Grimes
<freebsd-rwg@gndrsh.dnsmgr.net> wrote:
>
> That section is about how the router responds to an ICMP redirect
> set to IT, not one that is going THROUGH it.

Sorry I wasn't explicit, in all cases I'm talking about ICMP REDIRECTs
destined for the machine (as a host or as a router). This is
icmp_input dropping when either drop_redirect or ipforwarding is true.