Re: ICMP redirect ignored

H. Peter Anvin (hpa@transmeta.com)
27 May 1996 20:06:06 GMT


In article <4ocg4o$42j@flint.inr.ac.ru>,
really kuznet@ms2.inr.ac.ru <inr-linux-kernel@ms2.inr.ac.ru> wrote:
>Matthias Suencksen (msuencks@techfak.uni-bielefeld.DE) wrote:
>
>: So far, so good, but my question is: why didn't the kernel accept the
>: redirect from the gateway (A). It happended with kernel 1.3.93
>
>Because you recompiled kernel with "CONFIG_IP_FORWARD".
>Routers must ignore redirects.
>
>If you really want make "toy" router sensing redirects, define
>"CONFIG_IP_DUMB_ROUTER". But remember, it is just toy.
>If some host on the net really depends on correct functionality
>of your router, you must disable "CONFIG_IP_DUMB_ROUTER" and
>run gated.
>

However, it is worth thinking about the fact that a kernel compiled
with CONFIG_IP_FORWARD may not have to be a router. In fact, it would
be extremely nice if routing could be enabled/disabled using sysconfig
or something similar.

-hpa