On Fri, 14 Jun 2024 at 11:13, Rodney W. Grimes <freebsd-...@gndrsh.dnsmgr.net> wrote: > > That section is about how the router responds to an ICMP redirect > set to IT, not one that is going THROUGH it.
Sorry I wasn't explicit, in all cases I'm talking about ICMP REDIRECTs destined for the machine (as a host or as a router). This is icmp_input dropping when either drop_redirect or ipforwarding is true.