Sorry, my question was not clear enough. I know about settings for sending and accepting redirects. Currently I am not either accepting or sending them. The question is: can I filter the source for redirects using shorewall or are those packets captured by the kernel BEFORE getting to shorewall? I would like to filter the source address of IP redirects and have the kernel accept only those coming from the routers I want. Thanks Paolo
On 28/03/2016 17:26, Tom Eastep wrote: > On 03/28/2016 02:19 AM, Paolo Prandini wrote: >> Hi, I allowed on my interface only: >> >> Ping(ACCEPT) net all >> >> but I get ICMP redirects anyway. >> How can I block ICMP redirects? >> Or maybe there is a shorewall.conf option? >> Thanks a lot > > To prevent an interface from sending redirects, place this in > /etc/shorewall/init: > > echo 0 > /proc/sys/net/ipv4/conf/<interface>/send_redirects > > To prevent an interface from accepting redirects, place this in > /etc/shorewall/init: > > echo 0 > /proc/sys/net/ipv4/conf/<interface>/accept_redirects > > -Tom > > > > ------------------------------------------------------------------------------ > Transform Data into Opportunity. > Accelerate data analysis in your applications with > Intel Data Analytics Acceleration Library. > Click to learn more. > http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140 > > > > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users > ------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
