On Sun, Oct 28, 2001 at 11:47:16AM -0800, David Kirchner wrote: > Hi, > > Is there currently a way (sysctl, patch?) to disable dynamic route
I asume your "dynamic" routes are simple redirects. sysctl -w net.inet.icmp.drop_redirect=1 or in /etc/rc.conf: icmp_drop_redirect="YES" Or get a better routing table in the first place. > addition? We have a few very busy web servers here, and we're running in > to a bug in FreeBSD 4.2 (which is related to a bug in previous versions of > FreeBSD - the one that's fixed by lowering net.inet.ip.rtexpire to 10 from > 3600) where the dynamic route table grows but never flushes completely. > Here it is just as it hit the buffer space limit, according to vmstat -m: What does netstat tells you about the expire time for these routes? How are they flagged? -- B.Walter COSMO-Project http://www.cosmo-project.de [EMAIL PROTECTED] Usergroup [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message
