> Why isn't it enabled by default? > Answering myself: probably because of this: The IP fastforwarding path does not generate ICMP redirect or source quench messages.