Re: Discarding inbound ICMP REDIRECT by default

> On Fri, 14 Jun 2024 at 11:13, Rodney W. Grimes
> <freebsd-rwg@gndrsh.dnsmgr.net> wrote:
> >
> > That section is about how the router responds to an ICMP redirect
> > set to IT, not one that is going THROUGH it.
> 
> Sorry I wasn't explicit, in all cases I'm talking about ICMP REDIRECTs
> destined for the machine (as a host or as a router). This is
> icmp_input dropping when either drop_redirect or ipforwarding is true.

Ok, so long as we are not dropping ICMP REDIRECTS that are NOT
destined for the router we are fine, which is the behavior I expected
and observed on my network, though it is a bit older code.

-- 
Rod Grimes                                                 rgrimes@freebsd.org