On Tue, 2003-09-23 at 14:12, Maciej Soltysiak wrote: > > Hi, > > Is it possible to drop ICMP loose source routed IP packets ? > > How ? > Try Fabrice Marie's ipv4options match from patch-o-matic, you would then > do a: > # iptables -A INPUT -p icmp -m ipv4options --lsrr -j DROP > > Regards, > Maciej How about : ### don't accept source routed packets /bin/echo "0" > /proc/sys/net/ipv4/conf/all/accept_source_route Ray -- -- Raymond Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx> Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 --
Attachment:
signature.asc
Description: This is a digitally signed message part
