CVSROOT: /cvs Module name: src Changes by: st...@cvs.openbsd.org 2009/06/09 05:52:54
Modified files:
sys/netinet : ip_icmp.c
etc : sysctl.conf
Log message:
By default, don't accept IPv4 ICMP redirects. This behaviour can be
changed with a sysctl, so note it in sysctl.conf. v6 needs further
testing following discussions on the tech mailing list; rainer@ points
out possible interactions with neighbour discovery which need to be
investigated first.
"go ahead on the v4 part" deraadt@
