diff options
author | Florian Obser <florian@cvs.openbsd.org> | 2014-08-27 14:04:17 +0000 |
---|---|---|
committer | Florian Obser <florian@cvs.openbsd.org> | 2014-08-27 14:04:17 +0000 |
commit | a37c10a70e5b52eda69a999d38df285e81554e69 (patch) | |
tree | 725f796a2533b7d6612855b9390a900f027b57f9 /etc/examples/sysctl.conf | |
parent | e9646141ed76dc6df81a46a37d162cd4cd094752 (diff) |
Nuke net.inet6.icmp6.rediraccept and allow redirects on interfaces
with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@
Diffstat (limited to 'etc/examples/sysctl.conf')
-rw-r--r-- | etc/examples/sysctl.conf | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/examples/sysctl.conf b/etc/examples/sysctl.conf index b01a20ce96a..581de99bc1f 100644 --- a/etc/examples/sysctl.conf +++ b/etc/examples/sysctl.conf @@ -1,4 +1,4 @@ -# $OpenBSD: sysctl.conf,v 1.2 2014/08/20 11:23:41 mikeb Exp $ +# $OpenBSD: sysctl.conf,v 1.3 2014/08/27 14:04:15 florian Exp $ # # This file contains a list of sysctl options the user wants set at # boot time. See sysctl(3) and sysctl(8) for more information on @@ -8,7 +8,6 @@ #net.inet.ip.mforwarding=1 # 1=Permit forwarding (routing) of IPv4 multicast packets #net.inet.ip.multipath=1 # 1=Enable IP multipath routing #net.inet.icmp.rediraccept=1 # 1=Accept ICMP redirects -#net.inet6.icmp6.rediraccept=1 # 1=Accept IPv6 ICMP redirects (for hosts) #net.inet6.ip6.forwarding=1 # 1=Permit forwarding (routing) of IPv6 packets #net.inet6.ip6.mforwarding=1 # 1=Permit forwarding (routing) of IPv6 multicast packets #net.inet6.ip6.multipath=1 # 1=Enable IPv6 multipath routing |