[wellylug] Disabling ICMP Redirects from a Router

Jamie Baddeley wellylug at vpc.co.nz
Mon Oct 11 17:45:49 NZDT 2004


On Mon, 2004-10-11 at 17:38, Chris Hodgetts wrote:
> Hello, 
> 
> Does anyone know how to disable a router/gateway from sending ICMP
> Redirect packets out?
> 
> They are allegedly breaking stuff on our network - although I don't see
> why or how...
> 
> System is running:
> Red Hat Linux release 8.0 (Psyche)
> 
> I have read:
> Edit the /etc/sysctl.conf file and add the following line: 
>               # Disable ICMP Redirect Acceptance
>               net.ipv4.conf.all.accept_redirects = 0
>               
> Although I assume that stops a host from receiving and processing
> them...

That should stop it on boot, but you'll need to echo "0" >
/proc/sys/net/ipv4/conf/eth0/accept_redirects and
/proc/sys/net/ipv4/conf/all/accept_redirects to make it take on a
running system.

> 
> Any ideas?
> 
> Thanks
-- 





More information about the wellylug mailing list