From nobody Fri Jun 14 15:53:22 2024
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4W13jD6bn2z5P52P
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Fri, 14 Jun 2024 15:53:36 +0000 (UTC)
	(envelope-from carpeddiem@gmail.com)
Received: from mail-io1-f46.google.com (mail-io1-f46.google.com [209.85.166.46])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "smtp.gmail.com", Issuer "WR4" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4W13jD4J60z4pd9
	for <freebsd-net@freebsd.org>; Fri, 14 Jun 2024 15:53:36 +0000 (UTC)
	(envelope-from carpeddiem@gmail.com)
Authentication-Results: mx1.freebsd.org;
	none
Received: by mail-io1-f46.google.com with SMTP id ca18e2360f4ac-7eb75c0d0a7so75802239f.3
        for <freebsd-net@freebsd.org>; Fri, 14 Jun 2024 08:53:36 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1718380415; x=1718985215;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=K4RMkThTLEIhfCY/Eu5woHTl39pVj7qJrsd9Q5cpppE=;
        b=HpWeAi2S4vFQSQsTvwqndGSZI1FABsupuv0qhDyvR60s992fMmFwaUjE1n7zlK/Cz/
         5ffO61AIj0QJ3PevGSrZ5I4v+2XPraoyF7/ggc3xoXCS5D4ItdRdpMibl5iVH90Z+gxM
         vlipPwUxlJJK/V/4BX7tMf1VT5Bp+ai8Xm1nTC+K12Prg+/5oALi6MUspG2iAiZzUrL8
         3AxkIgInO0pGRIWU++0Ve0kx2eAFd2BUSvyv90TmaZWafTEp6qkoux7wBG/30qEACOxx
         pHJh4oALQnIaYJzSqz+1WMoUCcuFDMx5KjjhrSobqTjtAb64OUEA0fucJZN+eZvI8T90
         9uww==
X-Gm-Message-State: AOJu0YwTUtCOtm9mp/OL4V/glKa8R7VR62lufiJsU4weygLTmT/qWrRY
	cRKba1c2kJOsI2+8avr4QeD808D3Z270LRY8cmYI6Tukpkcir0QBoVMRS/XA0xWl8ngWOW4Dizi
	UKeTV44cc42USxbrrIP0EbIst1YroZQ==
X-Google-Smtp-Source: AGHT+IFFOSI+oUEKI0XbKug8cNLO5wd3vsNHiMQlCvxTtlSQMl6TUSF7Chu+InsfiRdIeuXO1qu0M/CqkWJhieXdtyU=
X-Received: by 2002:a05:6602:150f:b0:7eb:8015:3ee1 with SMTP id
 ca18e2360f4ac-7ebeb4986dbmr346646639f.1.1718380415180; Fri, 14 Jun 2024
 08:53:35 -0700 (PDT)
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@FreeBSD.org
MIME-Version: 1.0
References: <CAPyFy2BcytQfKpipnt4N4WupCOFcnRw4FCSyXdMAf76iEnHGdQ@mail.gmail.com>
 <202406141513.45EFDKKF049691@gndrsh.dnsmgr.net>
In-Reply-To: <202406141513.45EFDKKF049691@gndrsh.dnsmgr.net>
From: Ed Maste <emaste@freebsd.org>
Date: Fri, 14 Jun 2024 11:53:22 -0400
Message-ID: <CAPyFy2AYBm3fehF1KRKMB5Rv_VvNc2WWGVQR8E_9UASuxBNy_Q@mail.gmail.com>
Subject: Re: Discarding inbound ICMP REDIRECT by default
To: "Rodney W. Grimes" <freebsd-rwg@gndrsh.dnsmgr.net>
Cc: freebsd-net@freebsd.org
Content-Type: text/plain; charset="UTF-8"
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]
X-Rspamd-Queue-Id: 4W13jD4J60z4pd9

On Fri, 14 Jun 2024 at 11:13, Rodney W. Grimes
<freebsd-rwg@gndrsh.dnsmgr.net> wrote:
>
> That section is about how the router responds to an ICMP redirect
> set to IT, not one that is going THROUGH it.

Sorry I wasn't explicit, in all cases I'm talking about ICMP REDIRECTs
destined for the machine (as a host or as a router). This is
icmp_input dropping when either drop_redirect or ipforwarding is true.