On 03/28/2016 02:19 AM, Paolo Prandini wrote: > Hi, I allowed on my interface only: > > Ping(ACCEPT) net all > > but I get ICMP redirects anyway. > How can I block ICMP redirects? > Or maybe there is a shorewall.conf option? > Thanks a lot
To prevent an interface from sending redirects, place this in /etc/shorewall/init: echo 0 > /proc/sys/net/ipv4/conf/<interface>/send_redirects To prevent an interface from accepting redirects, place this in /etc/shorewall/init: echo 0 > /proc/sys/net/ipv4/conf/<interface>/accept_redirects -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
