Re: Discarding inbound ICMP REDIRECT by default

From: Ed Maste <emaste_at_freebsd.org>
Date: Fri, 14 Jun 2024 15:53:22 UTC
On Fri, 14 Jun 2024 at 11:13, Rodney W. Grimes
<freebsd-rwg@gndrsh.dnsmgr.net> wrote:
>
> That section is about how the router responds to an ICMP redirect
> set to IT, not one that is going THROUGH it.

Sorry I wasn't explicit, in all cases I'm talking about ICMP REDIRECTs
destined for the machine (as a host or as a router). This is
icmp_input dropping when either drop_redirect or ipforwarding is true.