Let's make that permanent for UNIX and permanent 'fixed' for Windoze.... :-) ________________________________ From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx on behalf of Pascal Hambourg Sent: Tue 25-Jul-06 15:21 To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: Messages in log with SNAT target Sietse van Zanen a écrit : > It's NOT default behaviour of NT to drop ICMP Redirects. You're right, my mistake. I had tested that some time ago, but I must have made a mistake. I just tested again Windows NT4, 2000 and XP as well as Windows 98 and they all accept ICMP redirects by default. > It IS default behaviour not to accept gateways, that are not on the local subnet. I hope this is not only default behaviour but permanent fixed behaviour.