document net.inet.icmp.redir{accept,timeout}

1 files changed, 10 insertions, 1 deletions

diff --git a/lib/libc/gen/sysctl.3 b/lib/libc/gen/sysctl.3
index e80abc6b8d6..f93e3d67e18 100644
--- a/lib/libc/gen/sysctl.3
+++ b/lib/libc/gen/sysctl.3
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: sysctl.3,v 1.76 2002/01/11 01:30:03 nate Exp $
+.\"	$OpenBSD: sysctl.3,v 1.77 2002/01/12 01:17:05 ericj Exp $
 .\"
 .\" Copyright (c) 1993
 .\"	The Regents of the University of California.  All rights reserved.
@@ -667,6 +667,8 @@ The currently defined protocols and names are:
 .It icmp	maskrepl	integer	yes
 .It icmp	bmcastecho	integer	yes
 .It icmp	errppslimit	integer	yes
+.It icmp	rediraccept	integer	yes
+.It icmp	redirtimeout	integer	yes
 .It ipip	allow	integer	yes
 .It tcp	rfc1323	integer	yes
 .It tcp	ident	structure	no
@@ -864,6 +866,13 @@ per second.
 ICMP error messages that exceeded the value are subject to rate limitation
 and will not go out from the node.
 Negative value disables rate limitation.
+.It Li icmp.rediraccept
+If set to non-zero, the host will accept ICMP redirect packets.
+Note that routers will never accept ICMP redirect packets,
+and the variable is meaningful on IP hosts only.
+.It Li icmp.redirtimeout
+The variable specifies lifetime of routing entries generated by incoming
+ICMP redirect.  The default timeout is 10 minutes.
 .It Li tcp.rfc1323
 Returns 1 if RFC1323 extensions to
 .Tn TCP