From ed7cc860374c899ac82fe41832afd84295494cc8 Mon Sep 17 00:00:00 2001 From: jkoshy Date: Tue, 15 Sep 1998 10:49:03 +0000 Subject: Turn off replies to ICMP echo requests for broadcast and multicast addresses by default. Add a knob "icmp_bmcastecho" to "rc.network" to allow this behaviour to be controlled from "rc.conf". Document the controlling sysctl variable "net.inet.icmp.bmcastecho" in sysctl(3). Reviewed by: dg, jkh Reminded on -hackers by: Steinar Haug --- etc/network.subr | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'etc/network.subr') diff --git a/etc/network.subr b/etc/network.subr index 526cf3c..f807a89 100644 --- a/etc/network.subr +++ b/etc/network.subr @@ -1,6 +1,6 @@ #!/bin/sh - # -# $Id: rc.network,v 1.29 1998/08/14 06:55:17 phk Exp $ +# $Id: rc.network,v 1.30 1998/09/06 08:20:11 phk Exp $ # From: @(#)netstart 5.9 (Berkeley) 3/30/91 # Note that almost all the user-configurable behavior is no longer in @@ -110,6 +110,11 @@ network_pass1() { sysctl -w net.inet.tcp.rfc1323=0 >/dev/null 2>&1 fi + if [ X"$icmp_bmcastecho" = X"YES" ]; then + echo -n ' broadcast ping responses=YES' + sysctl -w net.inet.icmp.bmcastecho=1 >/dev/null 2>&1 + fi + if [ "X$gateway_enable" = X"YES" ]; then echo -n ' IP gateway=YES' sysctl -w net.inet.ip.forwarding=1 >/dev/null 2>&1 -- cgit v1.1