In article [EMAIL PROTECTED]> you write:
>Is there a way to prevent a machine generating icmp_redirects, actually
>stop it running icmp altogether.
>I have tried the ICMP_DROP_REDIRECT ="YES" in /etc/rc.conf. This I think
>
>affects action on incoming redirects, but does not prevent generation of
Ruslan Ermilov <[EMAIL PROTECTED]> writes:
> 4.0-CURRENT has net.inet.icmp.log_redirect and net.inet.icmp.drop_redirect,
> for respectively logging and dropping ICMP REDIRECT packets (`off' by default).
Patches which add these to 3.3 are available on my freefall page.
DES
--
Dag-Erling Smorgrav
