ICMP redirect messages ignored by 2.2 (2.2.18)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello list,

I have a network setup as follows:

 +-------------+
 | xx.xx.xx.39 |
 +-------------+
        |                            +--- xx.xx.xx.81
        |      +-------------+       |--- xx.xx.xx.82
        +------| xx.xx.xx.36 |-------|--- xx.xx.xx.83
        |      +-------------+       |--- xx.xx.xx.84
        |                            +--- xx.xx.xx.85
        |
 +-------------+
 | xx.xx.xx.33 |
 +-------------+

 .33 is the default gateway for .39 & .36. I see a lot of ICMP redirect
messages coming from .33 to .39 but routing table doe not change:

12:26:54.360274 xx.xx.xx.33 > xx.xx.xx.39: icmp: redirect xx.xx.xx.81 to host xx.xx.xx.36 [tos 0xc2,ECT]
12:26:54.826649 xx.xx.xx.33 > xx.xx.xx.39: icmp: redirect xx.xx.xx.81 to host xx.xx.xx.36 [tos 0xc2,ECT]
12:26:55.006306 xx.xx.xx.33 > xx.xx.xx.39: icmp: redirect xx.xx.xx.81 to host xx.xx.xx.36 [tos 0xc2,ECT]
12:26:55.011350 xx.xx.xx.33 > xx.xx.xx.39: icmp: redirect xx.xx.xx.82 to host xx.xx.xx.36 [tos 0xc2,ECT]
12:26:55.099845 xx.xx.xx.33 > xx.xx.xx.39: icmp: redirect xx.xx.xx.82 to host xx.xx.xx.36 [tos 0xc2,ECT]

ip ro ls cache match 193.254.29.36
 show nothing...

accept_redirects is set to 1 for every interface:

proxy:~# for i in /proc/sys/net/ipv4/conf/*/accept_redirects; do cat $i ;done
1
1
1
1

And forwarding is explicitly turned off (RFC says that routers must not accept
ICMP redirects).

proxy:~# cat /proc/sys/net/ipv4/ip_forward
0

But still does not work ;-(

All comments are highly appreciated!

egards

-- 
        =- --rw------- =--=--=--=--=--=--=--=--=--=--=--=--=--=
          Theodor Milkov           Administrator IP Networks
          Davidov Electric Ltd.    Phone: +359 (2) 730158
          PGP: http://www.zimage.delbg.com/zimage.asc
        =--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=

Attachment: pgp00018.pgp
Description: PGP signature


[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux