Re: Should routers send redirects by default?

2010-08-20 Thread Eric J. Katanich
On 08/21/2010 02:08 AM, Brandon Ross wrote: > On Fri, 20 Aug 2010, Ricky Beam wrote: > >> I think it's almost universally disabled (by default) everywhere in >> IPv4 purely for security (traffic interception.) > > Okay, I'll ask again. Exactly how does disabling ICMP redirects on my > router pre

Re: Should routers send redirects by default?

2010-08-20 Thread Eric J. Katanich
On Fri, 20 Aug 2010 13:20:58 -0400, Christopher Morrow wrote: > Polling a little bit here, there's an active discussion going on > 6...@ietf about whether or not v6 routers should: > o be required to implement ip redirect functions (icmpv6 redirect) > o be sending these by default ... > In i

Re: Should routers send redirects by default?

2010-08-20 Thread Eric J. Katanich
On Fri, 20 Aug 2010, Ricky Beam wrote: > I think it's almost universally disabled (by default) everywhere in IPv4 > purely for security (traffic interception.) Okay, I'll ask again. Exactly how does disabling ICMP redirects on my router prevent traffic from being intercepted? -- Brandon Ross

Re: Should routers send redirects by default?

2010-08-20 Thread Eric J. Katanich
On Fri, 20 Aug 2010 18:16:35 EDT, Brandon Ross said: > How does turning off ICMP redirects on the router prevent a rouge PC from > sending ICMP redirects to it's neighbors? If I know for a fact that the network is designed such that I will never ever receive a valid ICMP redirect because there i

Re: Should routers send redirects by default?

2010-08-20 Thread Eric J. Katanich
On Fri, 20 Aug 2010 19:49:43 -0400 "Ricky Beam" wrote: > On Fri, 20 Aug 2010 13:20:58 -0400, Christopher Morrow > wrote: > > Polling a little bit here, there's an active discussion going on > > 6...@ietf about whether or not v6 routers should: > > o be required to implement ip redirect funct