From owner-freebsd-net Thu Jan 17 1:15:18 2002 Delivered-To: freebsd-net@freebsd.org Received: from mail.netmodule.com (mail.netmodule.com [195.49.111.194]) by hub.freebsd.org (Postfix) with ESMTP id 6DB3A37B405 for ; Thu, 17 Jan 2002 01:15:13 -0800 (PST) Received: from tigris.pacific (tigris.pacific [172.16.1.30]) by mail.netmodule.com (8.9.3/8.9.3) with ESMTP id KAA16034 for ; Thu, 17 Jan 2002 10:15:11 +0100 Received: by tigris.pacific with Internet Mail Service (5.5.2653.19) id <4WSSQA24>; Thu, 17 Jan 2002 10:15:12 +0100 Message-ID: From: "Reto Trachsel (NetModule)" To: "'net@freebsd.org'" Subject: RE: ICMP Redirect Date: Thu, 17 Jan 2002 10:15:11 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi Crist Hi, i'll describe a little more in detail: "Router" FreeBSD-4.5-RC Machine, configured as Router with multiple aliases on a interface "WinHost" A Client machine with Windows 2000 "BSDHost" A FreeBSD-Current machine Sysctl settings on Router and BSDHost: net.inet.ip.redirect: 1 -> Sending ICMP Redirect net.inet.icmp.drop_redirect: 0 -> Does not drop net.inet.icmp.log_redirect: 1 -> Logging ICMP Redirect Problem Cases: BSDHost/WinHost and Router The Router send a ICMP Redirect, but not only once, every time a icmp packet is recived. The BSDHost doesn't add the routing table. BSDHost/WinHost and Linux or CISCO Router The Router (Linux/CISCO) send once a ICMP Redirect package. The Client add the route to his routing table. The client side work well. Is there a problem with ICMP Redirect on the same interface? Why doesn't accept the clients the ICMP Redirect? Regards Reto Trachsel -----Original Message----- From: Crist J . Clark [mailto:cjc@FreeBSD.ORG] Sent: Donnerstag, 17. Januar 2002 02:18 To: Reto Trachsel (NetModule) Cc: 'net@freebsd.org' Subject: Re: ICMP Redirect On Wed, Jan 16, 2002 at 01:15:54PM +0100, Reto Trachsel (NetModule) wrote: > Hi All > > I have some problems with ICMP Redirect. I'm using a FreeBSD-4.5-RC machine > as default Rrouter for our network. If i'm doing a ping to an external host, > a ICMP Redirect message is sended by the router-machine, but not only > once... it is sended every time a ICMP echo-request is detected. The Host > doesn't enter the route from the ICMP redirect into his table. With other > Systems (ie RH Linux and CISCO Routers), this will work on this host > correctly. I am a little unclear on this. Is "router-machine" the FreeBSD router in question? What kind of machine is "Host?" Are we trying to get "router-machine" to stop sending redirects? Or are we trying to get "Host" to accept and use the redirects? > Is there a posibility to switch on/off the ICMP redirect? How can i > configure, which hosts to redirect? You can turn sending/receiving redirects on and off with sysctl(8), but not on per-host basis. You could simulate this behavior to some degree using firewalling. > I saw the configs for sysctrl, but no way to enable or disable the sending > of these packets. Du you have an idea? > > net.inet.icmp.drop_redirect = 0 A machine will ignore incoming redirects. If you want "Host" to use the redirects, set this to one. > net.inet.icmp.log_redirect = 1 This logs the event. The other sysctl(8) you may be interested in is, net.inet.ip.redirect Which controls whether a router sends redirects. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message