addendum and partial summary: Preventing ICMP redirects

From: Derk Tegeler <derk.tegeler_at_cmg.nl>
Date: Fri, 23 Mar 2001 12:15:02 +0100

Found a way myself:

on a running kernel set icmp_rejectcodemask=0x20 as follows

dbx /vmunix
...
(dbx) patch icmp_rejectcodemask=0x20
32
(dbx)

However, how can I make the kernel read this value at boot time?
/etc/sysconfigtab?

Regards,

Derk Tegeler

-----Original Message-----
From: Derk Tegeler [mailto:derk.tegeler_at_cmg.nl]
Sent: Friday, March 23, 2001 10:09
To: 'tru64-unix-managers_at_ornl.gov'
Subject: Preventing ICMP redirects


Hi,

Does anybody know how to prevent ICMP-redirect from modifying a default
(static) route?

Note the M flag on the default route, in the routing table below.

PS: t64 v4.0f

Regards,

Derk Tegeler

# netstat -rn
Routing tables
Destination Gateway Flags Refs Use Interface
Netmasks:
Inet 0.0.0.0
Inet 255.255.255.0

Route Tree for Protocol Family 2:
default 192.168.102.233 UGMS 2 108267 tu0
...
Received on Fri Mar 23 2001 - 11:14:31 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:42 NZDT