CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2024/06/20 13:25:04
Modified files:
sys/netinet : ip_icmp.c
Log message:
Do not send ICMP redirect if IP forwarding is IPsec only.
If sysctl net.inet.ip.forwarding is set to 2, only packets processed
by IPsec are forwarded. I this case behave more like a router than
a host and do not accept ICMP redirect packets.
OK deraadt@ sashan@ florian@ claudio@
