netdev
[Top] [All Lists]

Re: [PATCH] Suppressing ICMP redirects for mangled packets?

To: Paul.Russell@xxxxxxxxxxxxxxx (Paul Rusty Russell)
Subject: Re: [PATCH] Suppressing ICMP redirects for mangled packets?
From: kuznet@xxxxxxxxxxxxx
Date: Wed, 10 Nov 1999 19:01:57 +0300 (MSK)
Cc: netdev@xxxxxxxxxxx
In-reply-to: <m11lJ4V-000CIVC@localhost> from "Paul Rusty Russell" at Nov 10, 99 08:44:57 am
Sender: owner-netdev@xxxxxxxxxxx
Hello!

>       Is it reasonable to suppress ICMP redirects in this case?
> There are cases where we want to route through a box for special
> effects: most common is the where we're NATing 1.2.3.1 onto
> 192.168.1.1, and a box on 192.168.1.* connects to 1.2.3.1.

The solution is hack in the purest form. 8)

Why not to make it cleanly in spirit of ip_masquearade_icmp?
netfilter has to rewrite ICMP consistently in any case and
parsing redirects does not add anything new, does it?

Alexey

<Prev in Thread] Current Thread [Next in Thread>