Re: How can I drop "Source Quench, Redirect, Time stamp and Time stamp reply" ICMP packets

From: Allen Kistler (ackistler_at_oohay.moc)
Date: 10/26/04 

Date: Tue, 26 Oct 2004 01:26:00 GMT

Santa wrote:
> Could you please let me know which /proc entry tells. I am wondering
> in iptables do I have to add any rule to drop those four types of
> packets?. Thanks.

In my previous message I said you could use sysctl with
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.send_redirects = 0

sysctl works on the entries in /proc/sys, so
net.ipv4.conf.default.accept_redirects is
/proc/sys/net/ipv4/conf/default/send_redirects.
There's also an entry in /proc/sys/net/ipv4/conf for each interface.

Insert previous post for netfilter info here.

Relevant Pages

  • Re: [PATCH] utimensat() non-conformances and fixes [v3]
    ... of unconditionally freeing the sucker on unregistration just drop the refcount. ... Now we can keep a pair (reference to header, pointer to ctl table entry) ... we can associate such pair with each node in sysctl tree. ...
    (Linux-Kernel)
  • Re: interrupt statistics
    ... > use sysctl, and then adds the -a option to display all interrupts. ... I don't like the fact that it displays a "stray" entry for each ... Perhaps it should skip stray entries unless the count is ...
    (freebsd-hackers)
  • Re: [PATCH 58/59] sysctl: Reimplement the sysctl proc support
    ... It's not subtle breakage but subtle enforcement of the ... it wasnt really a bug but an uncleanliness - but yeah. ... is pretty much equivalent to a CTL_UNNUMBERED entry. ... simpler in code to just add in a simple proc entry than a full sysctl ...
    (Linux-Kernel)
  • Re: increasing datasize
    ... Harald Servat wrote: ... but this entry is not reported on my sysctl -a ... Not all such tunables are reported by sysctl -a, ... Michel TALON ...
    (comp.unix.bsd.freebsd.misc)
  • Re: How can I drop "Source Quench, Redirect, Time stamp and Time stamp reply" ICMP packets
    ... Santa wrote: ... > in iptables do I have to add any rule to drop those four types of ... sysctl works on the entries in /proc/sys, ... There's also an entry in /proc/sys/net/ipv4/conf for each interface. ...
    (comp.os.linux.misc)