ICMP redirects
Georgi Naplatanov <[email protected]> Sat, 24 Aug 2013 11:15:42 +0300
| Newsgroups | gmane.linux.debian.devel.firewall |
|---|---|
| Message-ID | <[email protected]> |
Hi, I want my machine to ignore ICMP redirects in Debian Wheezy (Linux kernel) Does net.ipv4.conf.all.accept_redirects = 0 in /etc/sysctl.conf make kernel to ignore ICMP redirects for all interfaces or 1) do I have to set it for particular interface like net.ipv4.conf.eth0.accept_redirects = 0 or 2) do I have to set a rule in iptables like iptables -A INPUT -i eth0 -p icmp --icmp-type 5 -j DROP Thanks in advance. Best regards Georgi