From owner-freebsd-stable  Mon May 21  1:58:31 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5])
	by hub.freebsd.org (Postfix) with ESMTP id D41C637B42C
	for <freebsd-stable@FreeBSD.ORG>; Mon, 21 May 2001 01:58:27 -0700 (PDT)
	(envelope-from keramidi@otenet.gr)
Received: from hades.hell.gr (patr530-b049.otenet.gr [195.167.121.177])
	by mailsrv.otenet.gr (8.11.1/8.11.1) with ESMTP id f4L8wNw24458;
	Mon, 21 May 2001 11:58:23 +0300 (EEST)
Received: (from charon@localhost)
	by hades.hell.gr (8.11.3/8.11.3) id f4L8wOV20701;
	Mon, 21 May 2001 11:58:24 +0300 (EEST)
	(envelope-from keramidi@otenet.gr)
Date: Mon, 21 May 2001 11:58:23 +0300
From: Giorgos Keramidas <keramidi@otenet.gr>
To: John Gray <jgray@airtel-atn.com>
Cc: freebsd-stable@FreeBSD.ORG
Subject: Re: Static routing only - no ICMP redirects
Message-ID: <20010521115823.A19368@hades.hell.gr>
References: <3B08D541.F541EFF4@airtel-atn.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3B08D541.F541EFF4@airtel-atn.com>; from jgray@airtel-atn.com on Mon, May 21, 2001 at 09:43:45AM +0100
X-PGP-Fingerprint: 3A 75 52 EB F1 58 56 0D - C5 B8 21 B6 1B 5E 4A C2
X-URL: http://students.ceid.upatras.gr/~keramida/index.html
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

On Mon, May 21, 2001 at 09:43:45AM +0100, John Gray wrote:
> Is there a way to prevent a machine generating icmp_redirects, actually
> stop it running icmp altogether.
> I have tried the ICMP_DROP_REDIRECT ="YES" in /etc/rc.conf. This I think
> 
> affects action on incoming redirects, but does not prevent generation of
> redirects .

One quick hack to make this behave exactly like you want it to behave would be
to firewall all icmp redirects.  I dont know of the One True Way to disable
ICMP redirects in FreeBSD, but it seems that this will work :-)

--giorgos


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message